4 ms·

It's not easy to explain to your parents either. "Don't look for the padlock any more, just look for a Not Secure warning... which may not appear until AFTER yo

It's not easy to explain to your parents either. "Don't look for the padlock any more, just look for a Not Secure warning... which may not appear until AFTER you put in your credit card details... at which point it's not really helped you at all has it. Huh. I have no idea what Google was thinking here. Better call the bank and cancel your credit card every time Not Secure pops up."

RussianCow 8y ago
To be fair, the "Not Secure" message is always there—it only changes color to red once you start typing into a form field. I do think it should be red by default, because the gray is not obvious enough, but I don't think it's necessarily any harder to explain than the green padlock.
- eco 8y ago
  It's kind of a weird how it works. Users will be looking at the field they are typing on (or even the keyboard for some users). Then they'll look down for the next field and so on until they reach submit. I think users will often miss the color change entirely. I think it'd make more sense to just make it red if there is any input options on the page at all.
  - cpeterso 8y ago
    Firefox shows an insecure warning in the insecure form field itself so the user will see it.
  - Ajedi32 8y ago
    An attacker could probably emulate a form in JavaScript without using any actual input fields. Displaying the indicator on user input seems much more difficult to bypass.
nikanj 8y ago
"If it says Not Secure, it's definitely not secure. If it doesn't say that, it's probably not secure anyway."