Re: [blink-dev] Re: Proposal: Marking HTTP As Non-Secure

On Thu, Dec 18, 2014 at 12:12 PM, Monica Chew <mmc@mozilla.com> wrote:
>
> Security warnings are often overused and therefore ignored [1]; it's even
> worse to provide a warning for something that's not actionable. I think
> we'd have to see very low plaintext rates (< 1%) in order not to habituate
> users into ignoring a plaintext warning indicator.
>

The context of the paper you cite is for a far more intrusive type of
warning than anyone has proposed here.  Interstitials or popups are very
aggressive methods of warning that should only be used when something is
almost certainly wrong, or else they indeed risk the "crying wolf" effect.
Some sort of small passive indicator is a very different thing.

PK