From reading the article the main point was that https:// https:// doesn't mean it's the official page you're looking for, which is true. Just that the communic

From reading the article the main point was that https:// https:// doesn't mean it's the official page you're looking for, which is true. Just that the communication between you and whatever page it is, is secure. Following the authors article around acquiring a .gov domain it seems as though it was relatively easy for that particular person to obtain a .gov domain. The argument is that it still may be a phishing attempt even if it does have both https:// https:// and .gov. But of course we're relying heavily on the article around acquiring a .gov domain being correct.