what sites should use ssl?
rlpb: My understanding of why some major players don't do it is because there is considerable overhead in running encryption when you are dealing with millions of connections.