Most bank websites (at least in Turkey) open a popup window to enter your credentials. I realized there is no way to tell if HTTPS is used if you use Safari.
Here are some screenshots: http://i.imgur.com/71G2Z.png http://i.imgur.com/vHQEa.png
This is very dangerous since it is not very hard to use mitm attacks to show user a different website.
