> Is there really no interface anyone can come up with that appropriately signals "this page should be and is secured by SSL"? The problem with first introduct

> Is there really no interface anyone can come up with that appropriately signals "this page should be and is secured by SSL"? The problem with first introduction is that while this is great for technical people, it will not pass the Bill Gates' mum test. I'm not saying that TOFU/POP is or isn't the right approach, I'm highlighting that there would be some resistance to change from people who don't understand and don't want to understand. Introducing (from a tech luddite's perspective) a complex intermediary step to getting online to a bank or ecommerce site is going to be something that people work against. Some people don't actually care that the government may listen in (for various values of people, care and government). I pretty much agree with 99% of what you're saying. I think this is a big problem and also political. I have no idea what the answer is though. > Think to yourself, if you ran the great firewall of China, which system you'd rather have: the flawed one we have now, or the one that explicitly allows your connection on the first and subsequent connections to a new service to be hijacked? This would be fairly straightforward to implement for the Chinese government. Another way to do this is to get your CA accepted (as has happened with CINIC) by default in various web browsers and abuse that.