> Most users will click through a security certificate warning generated by their browsers for the sake of convenience.

This can be avoided by using HSTS.