Even SSL Gmail can get sidejacked