[paulgb]

I didn't realize until recently, but GMail now has an option to automatically use https. It is under https://mail.google.com/mail/#settings at the bottom, and is turned off by default.

[timf]

And there was an automated tool released last year to mess with those who don't do that:

http://www.google.com/search?hl=en&q=https+gmail+cookie+...