I was thinking that was the way to go too for a while, but then I realized that marking http as insecure will just get user used to clicking through security wa

I was thinking that was the way to go too for a while, but then I realized that marking http as insecure will just get user used to clicking through security warnings and assuming that they're "normal"