On: Marking HTTP as Non-Secure

[kuschku]

Which is why you are supposed to throw out untrustable Certificate Authorities.

In the same way as TURKTRUST was thrown out by all vendors a few years ago, nowadays you should throw out VeriSign and GoDaddy just as well.