A surprising number of high-traffic sites have TLS vulnerabilities that are subtle enough for the green padlock to still appear.

Read more from our friends at Wired.com