[wallflower]

> Do you think everyone in the world makes sure they use the ssl version of their webmail in public?

I know techies who don't use GMail who don't bother to explicitly using https://mail.google.com - I don't know why.

[paulgb]

I didn't realize until recently, but GMail now has an option to automatically use https. It is under https://mail.google.com/mail/#settings at the bottom, and is turned off by default.

[timf]

And there was an automated tool released last year to mess with those who don't do that:

http://www.google.com/search?hl=en&q=https+gmail+cookie+...