Is the lock supposed to be closed at all times, or is it (as I assume) only locked when conducting monetary business online?
Mine is open now, indicating "You are browsing an ordinary website".
I would "assume" that it would be locked when conducting transactions, to insure such are "secure" operations..
But then, the question arises, what if a transaction or transactional information is being conducted / transfered / acquired without your knowledge, on a supposedly ordinary website?
That's what all those backdoor viruses, spy-ware / ad-ware proggies, etc. are all about.. getting that info, or otherwise accessing your computer for information on your bank accounts, credit cards, etc..
Seems to me it is better to be x-tremely paranoid, and make sure it is closed at all times..
Check your browser's help files on what the lock does in your particular browser, and act accordingly..
Then make sure you don't have any "sensitive" information stored on your computer..
No matter how "convenient" it is..
From what I've read in the "literature", online purchasing is no more dangerous than handing your credit card to a store employee for a purchase.. maybe even less so..
But it's always wise to be cautious when handing someone the means of access to your bank account..