3 ms·
Not quite. If you are given an HTTPS link, you should expect security. Passive upgrade from HTTP to HTTPS would be a different thing.
by TazeTSchnitzel 10y ago
Not quite. If you are given an HTTPS link, you should expect security.
Passive upgrade from HTTP to HTTPS would be a different thing.
- dlubarov 10y agoFair point - if the browser is displaying the protocol in the URL bar that is. I believe Edge and Safari don't. Chrome and Firefox seem to display https:// https:// but not http:// http://. In the case of Chrome visiting an untrusted CA, it already displays https:// https:// in red with strikethrough, which seems like a perfectly adequate way to negate any expectation of security. So the scary warning which takes two clicks to pass seems like overkill. If I was making a browser, I'd just show a "secure" symbol for valid, trusted certs, an "insecure" symbol for anything else, and no protocols in the URL bar.