Not entirely clear from the post, but very interesting to know is, whether the "almighty" Google will only label the HTTP page with password as insecure or will it label the entire site as insecure?