Querying Barclays. Where are users told to verify the embedded #SecureCode frame's SSL Cert? Asking for Trojans? The extra panel in this picture is what you get when you bring up the EMBEDDED FRAME's information, which is not the hosting site's cert.