[lstamour]

Eventually they’ll remove or downplay the secure label if the site doesn’t support modern TLS standards.

There’s no reason for users to trust a site when they see a secure icon, when the web goes secure by default, we’ll start to see this icon gradually disappear, reducing its importance. Secure TLS will need to be the default and it should be recognized in the browser that the transmission is secure but the site and its contents shouldn’t necessarily be trusted. Until and unless other trust standards are developed and promoted this way — like secure DNS — I see no reason why web browsers should highlight secure web pages. If anything they should indicate if people are about to use a new site, vs loading a commonly visited site to warn you about phishing attempts. They could also protect your privacy for you. But I think site identity validation and secure data transport should be independent concepts in browser UI.