This just in: Google is now lowering the ranking of sites that do not employ SSL encryption. I don't know if their bots are checking for other vulnerabilities and scoring on that basis as well.
I'll be surprised if they don't catch a lot of flak for that move. They normally don't get too detailed about their search ranking as it is, and it's difficult to argue that SSL-enabled sites have better search results. The only obvious conclusion is they're using their dominant position in web search to apply pressure for people to change. While the change is arguably
good, the use of market dominance to apply pressure is usually
not good.
