If you look at Chrome&#x27;s change to https indicators, they give these sites with auto issued certs the lock so users will interpret it as &quot;secure&quot;. Seems easy to create fraud sites and give them a legitimate site look.