I didn't realize until recently, but GMail now has an option to automatically use https. It is under https://mail.google.com/mail/#settings at the bottom, and is turned off by default.
And there was an automated tool released last year to mess with those who don't do that:
I know techies who don't use GMail who don't bother to explicitly using https://mail.google.com - I don't know why.