Let's say you logged in to a site using both http & https. Both are now in the #Firefox URL database. You type in the URL but because FF doesn't show the protocol you don't know if the URL is http or https. If you get the http, someone at Starbucks could steal your cookies.