> A user who checks for the green lock in https urls may not check that a "wrong password" page reached via the google login page is on a different domain because they don't expect it to be.

I wonder if you could use that new fangled css that changes the tab color to red, then the red unlocked icon looks like part of the error page styling.