11/07  If the URL is HTTPS, why do some sites have a popup to ask me to accept
       a certificate while others don't?  For the sites that don't, are they
       pretending to have SSL turned on?
       \_ The ones that don't prompt you are using a certificate that
          your browser has already accepted, like one from Verisign or
          Thawte.  You can verify that the connection is really SSL by
          checking for the key in the corner of your browser.
       \_ Could be that your browser is set to automatically accept certs
          from a trusted certificate authority.  You can check the browser
          to see which ones you will automatically trust.  If the browser
          doesn't recognize the CA as trusted, it will prompt you for
          approval.