What happened to the lock icon?
summary
Chrome removes the familiar lock icon in a 2023 redesign after evidence the icon misleads users: a 2021 study finds only 11% correctly identified what the lock guarantees and over 89% overestimate site safety. A 1% experiment replaces the glyph with a neutral dropdown, observes clicks but no regression in HTTPS usage or form submissions, and keeps certificate details and site-permission controls accessible. The conclusion: the lock is security theater and retiring it is safe as HTTPS becomes the default.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:03What the lock icon meant
- 6:24Misunderstanding the lock icon
- 8:10HTTPS adoption timeline
- 11:20Removing the lock icon
- 13:52Security theater vs reassurance
- 16:50Final decision to remove
- 17:32Ecosystem change takes time
- 19:57Conclusion and Q&A
related talks
41mhttps://*every site here*
10mUsers' Perceptions of Chrome Compromised Credential Notification
52mMaking SSL Warnings Work
58m25 Years of SSL - Secure(ish) Sockets Layer
48mHOW TO tell if you're designing an insecure site
29mBrowser Security in 2017
41mHow a Secure Enterprise Starts with the Web
40mWhat’s New with Chrome and the Web