There are lots of people hard at work on security, but does anyone really think about trustworthiness or authenticity w.r.t. websites? It seems to me that doing a quick google search for one of these 'elite' sites would turn up a few reviews and complaints of shady business practices, but has anyone put forth any thought on how to alert users that a website may be malicious, even though they aren't a source of malware?

...or is this something that we, as web designers/developers, expect users to be able to do on their own?