Ask HN: Why did Google just push a chrome update removing the “Not Secure” flag?

Looks like it's only for HTTP pages with credit card or password inputs in 56:

https://developers.google.com/web/updates/2016/10/avoid-not-...

Did they remove it for those cases too?

Is the "not secure" gone from all pages? I thought it was only supposed to show on pages with password fields?

I was under the impression it used to be on all pages. I just checked http://http-password.badssl.com/ and it still showed up there, maybe you're right.

The http site you were viewing may have just removed a login form from their menu, which would have removed the not secure label from the browser.