Try replacing your spaces with the '+' sign...

<a href="mailto:rob@ebrae.com?subject=Bob+&+Tom">rob@ebrae.com</a>
[download]

More generally you should look at the uri_escape function in the URI::Escape module.

-Blake