Hacker News Reader

Every other report I have read stated /all HTTP sites/ are marked insecure.

If this report is accurate, that's wonderfully relieving.

Does anyone know with certainty?

It appears to be just sites with forms that require passwords or other secure data, at least for now, though this may change in the future.