Thanks for the reminder. While I agree with you that only lowlife scum test a security hole by blowing up innocent victims, Google bears the lion's share of the blame, IMHO, for not defaulting to secure mode in the first place. I have webmail accounts on six other providers (hey, I've been online since 1981) and they *all* only do https.

And Google has done it again with Chrome. Check out ZDNet's article on that. Same deal, nasty scum exploit holes which shouldn't have been there in the first place. http://blogs.zdnet.com/security/?p=1865