Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I don't think many people pay much attention to the address bar, let alone a little lock icon with a red line through it.

If they want to get serious about it, they should just disable http support and require https for all actions. Or throw up a big in-your-face warning on http pages, not just make a small change to an obscure icon that nobody really understands.



> If they want to get serious about it, they should just disable http support and require https for all actions. Or throw up a big in-your-face warning on http pages, not just make a small change to an obscure icon that nobody really understands.

Even though I agree with you, I think that it's still a little bit too early for that. My prediction is that the browsers are going to start experimenting with this near the end of 2016 and that it'll become a part of stable versions of browsers somewhere in 2017.


Another alternative is to disable forms on http pages.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: