Surprisingly, it's possible for aspects of an https site to still not be secure, if the site is improperly designed. And it's extremely difficult to tell.