Re: HTTP is just fine

> If I
> were to show a message to the user, "Information you submit and receive can
> be exposed or altered in transit" is more meaningful than "Insecure" anyway.

That seems much more accurate to me :) and also removes ambiguation
about the actual site being insecure for whatever reason like hosting
malware. Past threads suggested/stated but can I confirm that this
message wouldn't be shown in any case for local loopback connections
such as SSH tunnelled connections too?

-- 

KISSIS - Keep It Simple So It's Securable