In reply to fwolf.

You are right—people need to understand the difference between the server being secure and the connection being secure. And this may not help with that, although it is a good opportunity for education. But since in the end the plan is to no longer say that a site (really, connection) is "secure" just because it has TLS, I'd still say that this is a step in the right direction. TLS doesn't make your site secure, but not having does make every connection to the site insecure.