title: How does Google pass referrers from HTTPS to HTTP?
body: <p>According to the W3C HTTPS sites shouldn't pass referrer to HTTP sites:</p>
  
  <blockquote>
    <p>Clients SHOULD NOT include a Referer header field in a (non-secure) HTTP request if the referring page was transferred with a secure protocol.</p>
  </blockquote>
  
  <p>Google is an HTTPS site, yet I still see Referrer Information in Google Analytics for all my HTTP sites. While Google hides the keywords in the <code>q=</code> parameter, I can still see the visitors as coming from Google.</p>
  
  <p>According to spec Google Traffic should come in as direct to HTTP sites. What am I missing here?</p>