For users, HTTPS Everywhere is a must: https://www.eff.org/https-everywhere
Also, by using DuckDuckGo [1] over HTTPS you get the same ruleset in HTTPS Everywhere [2] even if you don't have the extension installed.
[2] http://www.gabrielweinberg.com/blog/2010/09/duckduckgo-imple...