Spammers are the first to adopt https and all the mail and dns security stuff. It never was a sign of legitimacy