It would make for an interesting Firefox/Chrome plug-in. When you visit a site, have a indicator of some sort that warns that the site _may_not_ encrypt your password. Although, this could become obnoxious and there is no way good way to verify this.