<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 12/15/14 11:29 AM, Martin Thomson wrote:<br>
<blockquote
cite="mid:CAPLxc=VbLHJPvzEqccs3aJ4PQkBxEMv78Mua3wLVaz1wTHk40g@mail.gmail.com"
type="cite">
<div dir="ltr">
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Dec 15, 2014 at 10:02 AM,
Chris Peterson <span dir="ltr"><<a
moz-do-not-send="true"
href="mailto:cpeterson@mozilla.com" target="_blank">cpeterson@mozilla.com</a>></span>
wrote:
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">I do not
think Firefox should display a warning icon for non-HTTPS
sites (or at least not in 2015).</blockquote>
</div>
<br>
<br>
</div>
<div class="gmail_extra">I think that the real problem to talk
about is the presence of warning icons for HTTPS origins with
passive mixed content. Those sites currently look worse than
cleartext and that doesn't sit well with me.<br>
</div>
</div>
</blockquote>
<br>
That is a good question: why does the user care about (passive)
mixed content warnings? Is there any user risk if the Firefox
address bar displays mixed content sites with the plain HTTP icon
(while still using HTTPS connections underneath)?<br>
</body>
</html>