Agreed, every page should be encrypted. And the user shouldn't need to check the certs - if the CAs are trusted (yes there are problems there) then the domain

Agreed, every page should be encrypted. And the user shouldn't need to check the certs - if the CAs are trusted (yes there are problems there) then the domain name is enough.