Users still have trouble understanding what HTTPS entails. I work with security and most lay-people think it ensures the site is somehow trustworthy.<p>&quot;Why are you typing your password on faceb00k.com?&quot;<p>&quot;It has a green padlock, it&#x27;s safe.&quot;<p>I don&#x27;t have any suggestions for this problem, but I think it should be acknowledged at least.