I think we should have 3 security levels in the browser: Level 1) Static content, no scripting allowed 2) Scripting allowed (like the current state but more res

I think we should have 3 security levels in the browser: Level 1) Static content, no scripting allowed 2) Scripting allowed (like the current state but more restricted) Level 3) App like where you can allow the app to access certain resources. The TSL shield/lock could have a number in it 1-3 where 1 is the highest level of security. And you have to manually click it to go to level 2 or level 3. Sites would have to use the noscript tag to beg users to enable scripting abilities. Most websites that are not app-like should consider rendering their content statically. Browsers would start out with level 2 as default, but like what has happened with web sites without https/TSL/SSL they would be "shamed" by the lock/shield icon. Unless the site has a security-level 1 header, then the site should load with highest security.