In reply to Jeffrey.

It is a scare tactic. There is a big fight over who can monitor any of your "movements" on the internet between the big corps and government. Monitoring is about privacy and rarely about security, as the most important security factor is whether the site is secure, not if the communication is encrypted (it takes a goverment to monitor your communication on the wire, never heard of a non targeted attack that hit anyone who were just surfing the net from his home) so calling it "not secure" instead of "not private" seems like an obvious attempt to make the random net user be afraid and in return put pressure on site owners to go HTTPS.

Since most sites are HTTP only, this warning is just going to become a constant UI noise ending in effectively the same situation as today.