When loading webpages, the padlock icon becomes solid after the page begins to load, which seems to suggest data is being transferred before a secure connection has been established.
My suggestion is to always establish a secure connection where possible, and to indicate the connection is secure with a solid padlock before progressing.
Showing the lock icon change hints at TLS being absent while potentially sensitive information is transferred.
Changing the current behaviour would give users confidence that Orion only transfers data over encrypted channels.
