content: They will use a different cert obviously, there are plenty of attacks for ssl and even if they suck at it and the user has to accept a new cert - how many do you think click forward with nothing but anoyance instead of concern?