HTTPS puts the padlock in your browser - but please look in the right place, and don't be fooled by security imagery inside the web page itself.