Are there any plans from any of the browsers to show HTTP sites as insecure, rather than as some sort of "normal" state?
And the actual proposal: https://www.chromium.org/Home/chromium-security/marking-http...
https://www.chromium.org/Home/chromium-security/marking-http...
and "Deprecating Non-Secure HTTP" from Mozilla:
https://blog.mozilla.org/security/2015/04/30/deprecating-non...