Google custom search engines (CSE) don't obviously support HTTPS
This means that, for example, Google searches from the Ubuntu Firefox start page are unencrypted. There are probably a lot of start pages that use a CSE because apparently Google pays money to people this way.
https://www.google.com/cse? ... and https://encrypted.google.com/cse? ...
both didn't work for me.