>People who can reason about SSL false positives should be alarmed by SSL warnings on banking websites. However, Bravo-Lillo et al. [10] reported that six of their non-expert interviewees believe the opposite to be true: they said that SSL warnings could be ignored on banking websites because banks have good security practices. Some study participants similarly told Sunshine et al. [38] that they thought real at- tacks were less likely to occur on banking websites, although they were slightly more likely to heed warnings for banking websites than library websites in an experiment. https://adrifelt.github.io/sslinterstitial-chi.pdf