When on http:
Notify at the bottom of the page
Offer to switch to secure mode or stay in compatible mode
Discreetly and non-intrusively
Only ask once per session