Google Modifies SSL Behavior and the Results Are Troubling

Wouldn't this be an issue with the client (browser I assume) used in the testing (firefox/chrome/etc), as the referer header is sent by the client not the server?