If I go to an https site, I can see the grey padlock icon in the address bar. I've been unable to figure out how to show the cert details like thumbprint, to verify that I'm not being MITM attacked.
Maybe a different question. Does IE on WP8 completely block SSL access for sites that support HSTS? If not, and I can't verify the cert, it seems I can't trust anything secure on windows phone.