https everywhere does not work here: https://ectc-online.org/

See: https://www.eff.org/https-everywhere/atlas/domains/ectc-online.org.html

Eastern Collegiate Taekwondo Conference padlock icon
ectc-online.org
Infos (1)
Encryption (HTTPS) (1)
Communication is NOT encrypted

In Google Chrome I get a privacy error identity of the website is not verified.
Look here: http://toolbar.netcraft.com/site_report?url=https://ectc-online.org
This site does not support the SSL version 3 protocol.
Signature Algorithm sha1WithRSAEncryption (SHA-1 is being phased out)
Site Listed No (website: ectc-online.org is not listed in the certificate)
https://certlogik.com/ssl-checker/ectc-online.org
The server is not responding

We’ve tryied to analyze the page via the URL you’ve entered.
No SSL certificates were found.
Make sure that the name resolves to the correct server and that the SSL port (default is 443) is open on the server.

Security headers see attached.

HTTP security headers on http website -

x-content-type-options

Header not returned

Also see: https://secure.bluehost.com/~ectconli/ communication here = encrypted!
Netcraft risk 1 red out of 10: http://toolbar.netcraft.com/site_report?url=https://secure.bluehost.com

polonus

x-xss-protection

Header not returned

x-frame-options

Header not returned

content-security-policy

Header not returned