&gt; I think it&#x27;s safe to assume HTTPS when it comes to browser indications is broken. In a sense that majority of user don&#x27;t care or understand.<p>I&#x27;d agree with this as well. I find summarising it as &quot;if you enter secret details when the green lock isn&#x27;t there, a hacker could steal them&quot; isn&#x27;t concrete enough to sink in for most non-technical users. To really understand what the HTTPS lock icon means let alone what mixed content warnings means requires a lot of background knowledge most of us take for granted (web servers, networking, hacking, how a web page loads scripts&#x2F;images&#x2F;css).<p>Given many people still use simple passwords and the same passwords everywhere because of lack of understanding of what hackers can do, I think it&#x27;s a lost cause.<p>People do pay attention to e.g. Chrome&#x27;s big red &quot;this site is not secure&quot; screen that you have to bypass when there&#x27;s something wrong with the SSL certificate though. Showing something like this as standard would help.