A hack will be released in a few weeks capable of stealing ID/passwords. Thankfully, there is a simple fix. Gmail now has the option to run in SSL all the time. Once you're signed into Gmail: Settings -> Always use https -> Save changes
My understanding is that while the password is sent via secure http (SSL), the cookie is sent via normal http - which can be intercepted. Addittionally, once you logged in, it appears gmail reverted back to http. Even if you logged in manually at https://mail.google.com Anyhow, this just leaves you in https mode the whole time, sending all the data encrypted. For the record, yahoo and hotmail don't even offer SSL. And this attack works on there systems too. EDIT: from someone WAY smarter than me...
I know that Google won't sit around and let this happen. That said, anyone know how to configure GMail on the Outlook side to set the HTTPS?