Yes. Especially when using a webapp like GMail, the URL doesn't matter once you're in the app. I'm not saying I think URLs should not be accessible if someone wants one, but they're mostly just a user distraction. Perhaps a "who you are trusting" notification would be useful? Basically, just the hostname and the level of trust conferred by SSL certs, lack of inclusion in whatever blacklists Google keeps, etc.