No you should not : if the form's page is accessed through https, then the data is already securely submitted.
Ciform can be seen as a light replacement for https when it is not available, but it is not as much secure.
Of course, you could use Ciform over https if you wish, but I don't see any serious reason why to do this…
If Javascript is not available, the form will still be accessible, but the data will be submitted unencrypted, like if Ciform never existed.
This is also true when Javascript is disabled through the navigator's preferences.