Gmail users have been able to use https since 2008, however due to performance concerns the option was disabled by default.

Users who wish to collect their email over plain old http can still do so by selecting this option on the Gmail settings page.

It seems likely that Google was spurred into action by the malicious access of dozens of Gmail accounts used by human rights activists by suspected Chinese hackers.

On a side note – anyone tasked with administering any type of Squid proxy using NTLM Auth should be pleased too. Accessing Gmail over https eliminates an irritating authentication error when trying to upload a file attachment to the webmail service.

Bonus!