I found today that Google allows you to reach its search engine and submit searches over non-https connection.
Visiting http://google.com
, results in a redirect to the URL https://www.google.com/?gws_rd=ssl
Attempting to visit http://www.google.com/?gws_rd=ssl
(note, the protocol) results in access to Google over non-HTTPS connection.
Why does Google allow this?