That little padlock in your browser's address bar? Most people think it means "this site is safe." It doesn't. A phishing site can have a valid certificate and a green padlock. A page designed to steal your credit card details can run over a perfectly legit HTTPS connection. The padlock means one thing: your connection to whoever owns that domain is encrypted. That's it. Nothing about whether the person on the other end is honest. Developers ship HTTPS by default now. Most of us enabled it on...