Yes. A padlock indicate a secure https connection. But there's nothing you need to set or check to get it now. At first https was optional and turned off by default. A few years back Yahoo made it a permeant feature, no need to opt in any more (sounds great, but it only put them in line with what all major email providers had been doing for years).