Why is Canada Revenue Agency (CRA) promoting unencrypted web sites for netfiling?

Last year I started using FutureTax for preparing personal income tax for people. In previous years I used CanTax but got tired of their crappy applications that are proned to crashes.

NetFirms login page is broken

NetFirms is a web hosting service that operates in both Canada (www.netforms.ca) and United States (www.netfirms.com). Last year NetFirms were bought out by The Endurance International Group, Inc. Once the transition from the Netfirms old OpenBSD servers to The Endurance International Group Debian Linux servers I have noticed the Login page for their Control Panel has broken encryption.

When an encrypted login is not secure - the security is broken

While attempting to login to your site via https://www.cch.ca/MyAccount/login.aspx I noticed the encryption is broken. Further investigation revealed a stylesheets and a number of scripts that are hosted on Google that are not encrypted. As a company that claims to be concerned with security why are CSS and JS files hosted by Google needed on your login page? Why do you want to give your users credentials to the world's most powerful search engine. I certainly do not want my CCH username and password showing up in Google's search results.