By building security into top-level domains, Google makes it harder for HTTPS to fall short.