Troy Hunt – Short answer: you can’t trust the page any more than you can trust any other page served over an insecure connection.
The longer answer is that an asset has been embedded into a page loaded over HTTPS, but the reference to the asset is over HTTP. Now remember that SSL is not just about encryption, indeed one of the key value propositions of requesting resources over HTTPS is authenticity.
