[smtddr]

Don't know if this works still today... but I've definitely used it before: http://www.thoughtcrime.org/software/sslstrip/

[domenicd]

I think that attack is exactly what HSTS (https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security) is meant to solve.