I previously said that Google does not use SSL encryption to secure your email. True, by default, Google redirects you to their unencrypted site. However, once you've logged in, you can simply visit: https://gmail.google.com/gmail (note the additional s after http) to get your connection encrypted. (Thanks to Jon Gales for the tip.)...
http://google.blogspace.com/archives/001213