3 ms·

To be fair, the "Not Secure" message is always there—it only changes color to red once you start typing into a form field. I do think it should be red by defaul

To be fair, the "Not Secure" message is always there—it only changes color to red once you start typing into a form field. I do think it should be red by default, because the gray is not obvious enough, but I don't think it's necessarily any harder to explain than the green padlock.

eco 8y ago
It's kind of a weird how it works. Users will be looking at the field they are typing on (or even the keyboard for some users). Then they'll look down for the next field and so on until they reach submit. I think users will often miss the color change entirely. I think it'd make more sense to just make it red if there is any input options on the page at all.
- cpeterso 8y ago
  Firefox shows an insecure warning in the insecure form field itself so the user will see it.
- Ajedi32 8y ago
  An attacker could probably emulate a form in JavaScript without using any actual input fields. Displaying the indicator on user input seems much more difficult to bypass.