The problem is that everybody has been taught that SSL does mean "secure". "Look for the lock icon", "make sure it says https and not http" and so on. Which in

The problem is that everybody has been taught that SSL does mean "secure". "Look for the lock icon", "make sure it says https and not http" and so on. Which in the end is a good thing because people have been made aware of some security problems that way. The great thing about HTTPS is that it's mostly managed by the browser and looking for the lock or checking the URL is easy enough for anyone to do. But what can one do to make sure they're secure once they checked the basic things they've been taught?