Does it only work on HTTPS sites?

That sees to be the only type of sites it works on - HTTPS sites and Trustix sites. It would be nice if it worked on normal sites as well - cant it say something like “visiting the non-secure side of a verified site”? Is it that hard to do?

u can validate in excess of 200,000 sites… majority financial institutions…