Firefox 70 plans to change the display of HTTPS and HTTP in the address bar

In the Firefox 70 release scheduled for October 22, revised methods for displaying HTTPS and HTTP protocols in the address bar. Pages opened over HTTP will have an insecure connection icon, which will also be displayed for HTTPS in case of certificate issues. The link for http will be displayed without specifying the "http://" protocol, but for HTTPS, the protocol display is still left. There is also more in the address bar will not be information about the company is displayed when using a verified EV certificate on the site.

Instead of the "(i)" button there will be shown connection security level indicator, which will allow you to evaluate the status of code blocking modes for tracking movements. The color of the lock symbol for HTTPS will be changed from green to gray (it will be possible to return the green color through the security.secure_connection_icon_color_gray setting).

In general, there has been a shift in browsers from positive security indicators to warnings about security issues. The meaning of a separate selection of HTTPS is lost, since in modern realities the vast majority of requests are processed using encryption and are perceived as a given, and not additional protection.
On Statistics Firefox Telemetry service, the global share of HTTPS page requests is 79.27% ​​(70.3% a year ago, 59.7% two years ago), and 87.7% in the US.

EV certificate information will be removed to the dropdown menu. Added "security.identityblock.show_extended_validation" option to about:config to return display of EV certificate details in the address bar. The processing of the address bar in general terms repeats changes, previously approved for Chrome but not yet planned for Firefox hide default subdomain "www" and add mechanism Signed HTTP Exchanges (SXG). Recall that SXG allows the owner of one site to digitally authorize the placement of certain pages on another site, after which, if these pages are accessed on the second site, the browser will show the user the URL of the original site, despite the fact that the page is loaded from another host .

Addendum: The information given in the initial version of the news about the intention to hide "https://" was not confirmed, but ticket with this proposal was transferred to the "task" state and added to the summary task list by changing the display of HTTPS in the address bar.

Source: opennet.ru