TLS Misconfiguration, Explained: Old Protocols, Broken Certificates and the Hop That Drops HTTPS
A padlock in the address bar does not prove the channel is sound. Here is how legacy TLS versions, weak cipher suites, faulty certificates, cleartext redirect hops and missing HSTS expose traffic to anyone on the path, and a configuration that closes them.