We determine if the site is a secure origin, and display a warning if it isn't.  We shouldn't be trusting data coming from the render processes, so this should be processed on the browser side.