For HTTPS to get effective, a web-site has to be wholly hosted above HTTPS. If a number of the web page's contents are loaded around HTTP (scripts or pictures, one example is), or if only a certain web page which contains sensitive information, like a log-in web site, is loaded around HTTPS when the remainder of the site is loaded about simple HTTP