Safari actually does (or did it): normal (grey) https icons for normal certificates as well as color coded icons including an abbreviated version of the party t

Safari actually does (or did it): normal (grey) https icons for normal certificates as well as color coded icons including an abbreviated version of the party the certificate was issued to. (Compare this to variations of shield icons you have to click onto for further information in Firefox, which deems me to be much more cryptic.) As for colors or other signaling, yes, these are mostly cultural and are to be learned. (E.g., red isn't naturally "bad" or a warning, it may be rather "important") However, this is such a crucial technology, isn't it a viable option having a set of rules, which easily fits on a single page of legal paper in big print, and teach this to everyone? (How do people manage to cross the street, if they can't be expected to incorporate a simple set of rules? We, on the other hand, rather teach them to be careless and suspend judgement. Notably, I'm speaking of the desktop environment, mobile has a completely different set of requirements and widely proliferated alternatives, like dedicated apps for crucial tasks.) And, regarding don't care about the identity as long as it is TLS, I'm not so sure.