Observer:
In the last Global Transparency Report from Google, the company assessed the top 100 Alexa sites on whether or not each one’s administrators had implemented HTTPS, which secures the connection between website and visitor. Two categories of the most popular sites still haven’t upgraded to secure connections: news/media and adult content sites. We know what the holdup is for media: it’s the ad networks. Many third-party ads aren’t served securely.
…
“If you are visiting pages in an unencrypted manner, it’s very easy to track you and serve you malware,” Joe Hall, chief technologist at the Center for Democracy and Technology, told the Observer in a phone call. “There’s a huge integrity element, in terms of making sure the thing sent to you wasn’t changed in transit.”