11.26.18
You can't assume the padlock means a site is legitimate.

You can't assume the padlock means a site is legitimate.
Google really wants to developers to update their websites.
It’s part of Google’s push to encourage developers to switch to HTTPS.
Apparently, photos on the app aren't encrypted with HTTPS.