{"action":"created","issue":{"url":"https://api.github.com/repos/qutebrowser/qutebrowser/issues/3573","repository_url":"https://api.github.com/repos/qutebrowser/qutebrowser","labels_url":"https://api.github.com/repos/qutebrowser/qutebrowser/issues/3573/labels{/name}","comments_url":"https://api.github.com/repos/qutebrowser/qutebrowser/issues/3573/comments","events_url":"https://api.github.com/repos/qutebrowser/qutebrowser/issues/3573/events","html_url":"https://github.com/qutebrowser/qutebrowser/issues/3573","id":295621523,"node_id":"MDU6SXNzdWUyOTU2MjE1MjM=","number":3573,"title":"Mark HTTP sites as insecure","user":{"login":"The-Compiler","id":625793,"node_id":"MDQ6VXNlcjYyNTc5Mw==","avatar_url":"https://avatars0.githubusercontent.com/u/625793?v=4","gravatar_id":"","url":"https://api.github.com/users/The-Compiler","html_url":"https://github.com/The-Compiler","followers_url":"https://api.github.com/users/The-Compiler/followers","following_url":"https://api.github.com/users/The-Compiler/following{/other_user}","gists_url":"https://api.github.com/users/The-Compiler/gists{/gist_id}","starred_url":"https://api.github.com/users/The-Compiler/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/The-Compiler/subscriptions","organizations_url":"https://api.github.com/users/The-Compiler/orgs","repos_url":"https://api.github.com/users/The-Compiler/repos","events_url":"https://api.github.com/users/The-Compiler/events{/privacy}","received_events_url":"https://api.github.com/users/The-Compiler/received_events","type":"User","site_admin":false},"labels":[{"id":134032865,"node_id":"MDU6TGFiZWwxMzQwMzI4NjU=","url":"https://api.github.com/repos/qutebrowser/qutebrowser/labels/component:%20ui","name":"component: ui","color":"0052cc","default":false},{"id":267497012,"node_id":"MDU6TGFiZWwyNjc0OTcwMTI=","url":"https://api.github.com/repos/qutebrowser/qutebrowser/labels/priority:%201%20-%20middle","name":"priority: 1 - middle","color":"0e8a16","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-02-08T18:38:08Z","updated_at":"2018-09-08T01:36:58Z","closed_at":null,"author_association":"COLLABORATOR","body":"Chromium [starts marking](https://security.googleblog.com/2018/02/a-secure-web-is-here-to-stay.html) HTTP (non-HTTPS) pages as \"Not secure\" starting July.\r\n\r\nWe should do something similar. Not sure yet about how it'd work. What I can think of:\r\n\r\n- Show the whole URL in yellow, like after a SSL error\r\n- Like above, but add a new setting for that color\r\n- Show the **http**://example.com part in a different color (e.g. red)\r\n- Show a \"(Not secure)\" in front of the URL"},"comment":{"url":"https://api.github.com/repos/qutebrowser/qutebrowser/issues/comments/419603395","html_url":"https://github.com/qutebrowser/qutebrowser/issues/3573#issuecomment-419603395","issue_url":"https://api.github.com/repos/qutebrowser/qutebrowser/issues/3573","id":419603395,"node_id":"MDEyOklzc3VlQ29tbWVudDQxOTYwMzM5NQ==","user":{"login":"jgkamat","id":4349709,"node_id":"MDQ6VXNlcjQzNDk3MDk=","avatar_url":"https://avatars2.githubusercontent.com/u/4349709?v=4","gravatar_id":"","url":"https://api.github.com/users/jgkamat","html_url":"https://github.com/jgkamat","followers_url":"https://api.github.com/users/jgkamat/followers","following_url":"https://api.github.com/users/jgkamat/following{/other_user}","gists_url":"https://api.github.com/users/jgkamat/gists{/gist_id}","starred_url":"https://api.github.com/users/jgkamat/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jgkamat/subscriptions","organizations_url":"https://api.github.com/users/jgkamat/orgs","repos_url":"https://api.github.com/users/jgkamat/repos","events_url":"https://api.github.com/users/jgkamat/events{/privacy}","received_events_url":"https://api.github.com/users/jgkamat/received_events","type":"User","site_admin":false},"created_at":"2018-09-08T01:36:58Z","updated_at":"2018-09-08T01:36:58Z","author_association":"COLLABORATOR","body":"My 2c on this is that just because chrome does some ui change, doesn't mean we should do it either. Many people use qb precisely because google cannot control its ui. Since we are already marking `https` as \"secure\" with green, I don't think we need to push it any more. When I see 'red/yellow' I think more of 'errors' than 'no ssl' (and because of that, I would put the setting back to the default). Since most browsers don't do this, there's no \"implicit standard\" to follow here, unless chrome is setting the standard by itself.\r\n\r\nSince people can already make the standard plain http color more distinct with their own theme if they want, I really don't think there's anything to do here."}}
{"actor":{"display_login":"jgkamat"}}