Yes, although this behavior is not enabled by default, there are a few simple steps that you need to take, having first configured your server to use SSL, we like the intructions here.
There's one step that isn't referenced in the instructions above and that is to ensure that you have the new virtual directory security restrictions modified to allow access from outside your local network, which is of course where most OWA users will be.
