There is a tool, SSL strip that removes SSL from the target machines https request dynamically. While not breaking SSL it is effective on a non observant user.

There is a tool, SSL strip that removes SSL from the target machines https request dynamically. While not breaking SSL it is effective on a non observant user. https://github.com/moxie0/sslstrip https://github.com/moxie0/sslstrip