Usually only logins are performed on a secure (https) connection. Email isn't "highly sensitive" like a bank account info since it goes in plain text from the sender to the receiver anyway (unless you have some encryption schemes in place - very uncommon).