Steps to reproduce: 1) Visit an HTTPS site, such as <https://crypto.stanford.edu/websec/> or Bugzilla. 2) Click the location bar and type "adf". 3) Notice that the favicon looks like it is underwater. Seems like the thing to do is drop the DV-HTTPS status indicator and show the faded default favicon on the usual gray background. Something similar happens for EV-HTTPS, such as <https://www.paypal.com/>. Other options including leaving the site's favicon in place or showing a non-faded default favicon.

I think that the transparent icon serves a good purpose (see bug 430767 comment 29) and that the status-quo looks fine. But if it really must be changed, I personally think that the best way to do so would be to drop the color indicator when the user is typing and the icon is "invalidated". You can get a feel for what this option would be like with the following userChrome: #urlbar[pageproxystate="invalid"] > #identity-box > hbox { background-position: 0 10px !important; } (Note: use 0 0 if you have a square site button, 0 10px for a curved site button on XP, and 0 3px for a curved site button on Vista) FWIW, this is what was done with the yellow address bar prior to its removal: in the Firefox 3 nightlies prior to bug 417844, the yellow coloring of the address bar went away when the user started to type.

Argh. Scratch that idea. This causes problems if there's text on the site button (EV or if ETLD+1 was turned on), and I don't think we really want to be removing the text from the button during this process, as that'll cause the textbox to jump left when the user begins to type. (The site button really should've been put to the right and divorced from the favicon, but oh well.) So I guess this means either no longer displaying a different icon for pageproxystate="invalid" (not sure if I like this idea) or just keeping the status-quo (there's nothing wrong with the current appearance, IMHO: it's supposed to look blended in).

Given the current thinking in bug 430767 around bracketing the favicon part of the button in a white blob, to help it stand out, this bug may be resolved by that one.

Verified with Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9pre) Gecko/2008050206 Minefield/3.0pre ID:2008050206