Actually, it is worse than just using plain HTTP because it tricks people into believing their connections are secure. There is a significant and growing group

Actually, it is worse than just using plain HTTP because it tricks people into believing their connections are secure. There is a significant and growing group of lay people who have been trained not to input sensitive data into nonTLS web pages. "Flexible SSL" effectively screws them.