We've been taught to look out for that little padlock to ensure a website is secure. But it's dangerous to rely on just one detail.