Public Key Infrastructure is only effective if it's encrypted from end to end. Gmail is *webmail* that travels through an unencrypted connection from gmail.com to you. I realize that you can use https:// when going there, but do you do it every time? Gmail doesn't force your connection to be secure.

just my opinion...