Facebook's own TLS cert used by crooks in double logon phish
Phish me once, shame on Facebook; phish me twice, shame on Facebook anyway Netcraft security man Paul Mutton says phishers are using Facebook's TLS certificate to create a 'remarkably convincing' scam that would go unnoticed by most users."