https all the way

Gmail lets you have a secure HTTPS session via https://gmail.google.com as well as its default SSL-enabled login page. Many other free webmails have non-SSL login as default and offer SSL login as an option and few offer HTTPS session. For more details see this page.