I like this post from ISC about what amounts to transparent SSLs. What if sites continue to use SSL on the underlying form submission portion or a website login? How are consumers supposed to tell and/or look for the HTTPS connection? D’oh!