This just in: Google is now lowering the ranking of sites that do not employ SSL encryption. I don't know if their bots are checking for other vulnerabilities and scoring on that basis as well.