Sure its terrible from the users perspective, but from Nokia's, by the time they decided it was a good idea to monkey with HTTPS, they already had the equivalen

Sure its terrible from the users perspective, but from Nokia's, by the time they decided it was a good idea to monkey with HTTPS, they already had the equivalent of a screen-cap trojan complete with full-on keylogger already installed. Can you blame them for the "meh" on HTTPS? If you don't have the juice in your browser-ette to run standard web, SSL isn't going to just be "slower", its not going to work at all either. But there's one thing we're in perfect agreement on. Nokia owed the users a truckload of transparency on this one. We should not have learned about it through some security researchers blog.