Have been using HTTPS Everywhere from some time. The worst are sites which have https but not configured properly - cert for wrong domain or expired.