> (don't get me wrong, it's good thing that it exists, I just don't see why all the sites have to use it) Because regular users don't know how to distinguish b

> (don't get me wrong, it's good thing that it exists, I just don't see why all the sites have to use it) Because regular users don't know how to distinguish between the level of trust they need for visiting "Justin's travel blog" vs. their online banking website. If we don't display red error messages if a site they visit has an invalid certificate, they don't know how to tell it's not safe to enter their credentials there. The web was once mainly used by academics, programmers and other geeks, now it's used by marketers, scammers, hackers, and a bunch of other malicious actors. I wish we could go back but that ship has sailed.