Re:How I recorded user behaviour on my competitor’s websites
by Ibethewalrus on Thursday August 23, 2018 @10:07AM
(#17827352)
I can agree firsthand, people think a site, any site, is safe because of the padlock...
:facepalm:
https://blog.chromium.org/2018/05/evolving-chromes-security-...
and in fact one of the main reasons is that use of HTTPS is far too little information for the browser to affirmatively indicate "This site is secure and trustworthy." So they are planning to get rid of the padlock. (Use of HTTP is enough for the browser to affirmatively say it's insecure, though.)
So I think Google understands that one of the consequences of pervasive HTTPS is that the padlock is at best meaningless and at worst misleading, as we saw here.