In some websites, especially on their payment section, I see a text something like: You are on a secure page. Your personal data is encrypted and protected by SSL technology. However it looks like a custom message. Therefore, when I am attacked somehow ( by MITM, or with fake copy website), although, my browser alerts for a "not secure website", I might still see the text from the website that tells me to not worry.
I would like to ask the best practice about it. Should I implement a mechanism that checks if my front-end is really in SSL protection before printing this text? Or is it better to not write something like that and leave the protection message to only to the browser?
Thanks in advance.