Someone has posted the actual script elsewhere in this thread [1]. Of particular interest is line 194: if (location.protocol === 'https:' && queryString.sea

Someone has posted the actual script elsewhere in this thread [1]. Of particular interest is line 194: if (location.protocol === 'https:' && queryString.search(/dlsource=hdrykzc/i) !== -1) // Patch for Lenovo - do not run on https sites So yes, it seems someone at Lenovo was security-aware enough to demand an exception for HTTPS. Unfortunately the fine folks at Superfish either didn't understand or didn't care. [1] https://news.ycombinator.com/item?id=9072542 https://news.ycombinator.com/item?id=9072542