I believe hotmail handles this by proxying all external resources through their own HTTPS proxies.