Comment by RRRA

Not considering the many holes, cyphersuites, running TLS 1.3+ etc.

( http://wingolog.org/archives/2014/10/17/ffs-ssl )

...it should probably look like this:

Safe against active attacks:

    Encrypted (Certified)    COOL GREEN

Safe against passive attacks:

    Encrypted (Self-Signed)  SCARY ORANGE

Safe against world peace, ie. UNSAFE:

    Unencrypted              EVIL RED