Insecure call

All posts on my site get an insecure form call for the comments:

<form action="http://www.mysite.com/wp-comments-post.php ...

What could be triggering this? Everything else on the site is resolving nicely to https.