I gotta agree with Mark on this one. It's incentive to encourage https, but will have no actual effect on real security.