Follow
something I've never considered before. Some people believe the "https lock icon" is a proof of validity rather than *only* a proof of encryption in transit.
Don't trust the lock to keep your data safe, but on the other hand, if it's missing, don't put in a password or a credit card number at all.
https://krebsonsecurity.com/2018/11/half-of-all-phishing-sites-now-have-the-padlock/
@0x56 true shit
@0x56 For important sites to me, I will double check the certificate from time to time. Not a lot of information to be had but could be a clue as to validity / invalidity of the site you are on.