When on http:

Notify at the bottom of the page
Offer to switch to secure mode or stay in compatible mode
Discreetly and non-intrusively
Only ask once per session