Taobao.com provides an ActiveX control for secure login. It can prevent keyloggers.
And they are IE & Win32 only. That's why every Mac & Linux user has to install a VirtualBox/VMWare for online trading.
I was hoping Google Gears could provide some sort of similar mechanism, together with CAPICOM exposure to Javascript across platform and browsers :)
https://login.taobao.com/member/login.jhtml
plaintext version
http://login.taobao.com/member/login.jhtml
IIRC most of these popular sites provide a switch option between HTTPS and HTTP.