I'm reminded of a Torvalds quote from about a decade ago:
> This 'users are idiots, and are confused by functionality' mentality of Gnome is a disease. If you think your users are idiots, only idiots will use it.
> This 'users are idiots, and are confused by functionality' mentality of Gnome is a disease. If you think your users are idiots, only idiots will use it.
I buy that this isn't as easy as the old mechanism (click on the TLS lock icon next to the URL) but...
In the last few years, I've been somewhat pleasantly surprised at how much more attention my non-tech friends and acquaintances are paying to the topic of security.
No, they don't have it all figured out. But they are aware, and they are demonstrating some "pause and check".
How nice it would be to be able to point them to an obvious and straight-forward representation/presentation of the cert chain.
Instead, we get continued fussing with the "lock UI" and further and further hiding away of the relevant details.
Boo.