Part of the problem is that the lock icon is just grey. The lock icon should be pulsing red, solid yellow or green. This would work the same way Google's anti-black-hat-SEO advisories work. Force people into security by calling attention to bad practices and reducing the prominence in search of any site that violates this.
Clicking on the pulsing red icon, would pop up a window that tells people exactly what they should be careful about.
Clicking on the certificate, should present a much clearer dialog for the layman.
Clicking on the pulsing red icon, would pop up a window that tells people exactly what they should be careful about.
Clicking on the certificate, should present a much clearer dialog for the layman.