There is actually appeal to having no indicator: the absense of an indicator doesn’t inadvertently suggest anything about the site’s overall security. The padlo

There is actually appeal to having no indicator: the absense of an indicator doesn’t inadvertently suggest anything about the site’s overall security. The padlock icon we’re so accustomed to can create a false sense of security, as every other aspect except the connection to all servers may actually be insecure. You may, for instance, be transmitting credentials that may be stored in plain text, be easily accessible to third-parties or may even be handed directly to black markets. The padlock itself says nothing about any of those details. A better approach to no icon at all, I think, is simply “secure connection” wording. Trying to distill a lot of complexity and nuance into a single icon is what’s ultimately problematic. It works somewhat well, but not quite well enough.