Major browsers like Chrome and Firefox are being more and more aggressive at displaying the security level of websites, for instance warning you when you try to enter passwords on a non-HTTPS website.
I just saw in GMail that emails from major websites are actually signed and use TLS (for instance an email from PayPal: "signed by mail.paypal.fr") but you have to click on a small arrow to reveal a menu to see this, and it's written in small without any colors.
OK, for the colors, GMail reserves the green for S/MIME; But still, is there a reason for not displaying a big "SIGNED by mail.paypal.fr" or "NOT SIGNED" immediately visible? This would prevent a lot of phishing, right? Why such a difference with HTTPS?
OK, I guess my question was not very clear.
The comment of @shroeder (here) partly answered it though: dumping non-signed emails is the kind of things I meant as "aggressive pushing". Again I guess I don't know enough about email security because I do have many emails in my GMail where there's not "signed by XXX" in the "more informations" bubble, so I guess it's another signature @shroeder is referring to?
I'm sorry if my question was not well formulated; it's just that I received yet another phishing email so I was wondering how come I still have to rely on myself to identify a spoofed email from a legitimate one in an era where all the important websites I have an account on have HTTPS (so they're already signing stuff all the time and my browser will freak out when something is wrong with the signature).
Turns out I didn't receive this phishing email on my GMail account but on my work one, on Thunderbird. So I guess my "true" question would be:
How come emails from my company are not signed even though they have an HTTPS website? Is it a lot more work? And how come I never saw any info in thunderbird about the "security level" of the emails I receive? Because I know thunderbird does show it when an email is signed with PGP for instance.
Instead of telling my personal story I tried to come up with a more "general" question, and... well apparently I didn't go that well.