>I have to agree with the calls for allowing warning-less HTTP

Completely flawed assumption, see the following for details:

https://realtimelogic.com/articles/How-Anyone-Can-Hack-Your-...