It's great to see HTTPS being adopted everywhere: even a Polish guy's personal blog on a Christmas Island (.cx) domain is encrypted. That's what I thought until I realized that I was looking at the favicon. He's not using HTTPS. He's using a lock symbol as his favicon and that alone was enough to throw me off.

The browser vendors keep gratuitously changing the shape, color, and position of the lock icon, so a lock symbol anywhere in the browser edges is enough to fool most of us.