When the 'S' in HTTPS also stands for shady (engadget.com)

TL;DR: Users have been conditioned to think HTTPS means "legit site", the sky is falling.