I think that another company brought to light during the last week was not using https. This may be adding to the confusion.