Firefox 4 - Where's The Padlock?

Website address should say https not http.
Click on favicon in address bar and you'll see the padlock if it's a "secure" or encrypted site.

Reference
"All the padlock means is that the web page is using HTTPS (Hyper-Text Transfer Protocol Secure). It's almost useless, since you can easily see if a website (such as this one) is using HTTPS by looking at the url bar, or checking if the web site's domain is extended into the favicon. If you really want it, the padlock is still there if you click on the favicon/domain button."

Site Identity Button
"If you are sending any sort of sensitive information (bank information, credit card data, Social Security Numbers, etc.) the Site Identity Button should not be gray."

Site Identity Button implemented in Firefox 3. Who knew.

Another thing I've noticed in Firefox 4:
Font rendering is not as good. I'm assuming it's Firefox 4 causing the problem since that's when I noticed it. I use Josefin Slab font on my blog titles and the slanted e does not display very clearly. Addon fix?