what sites should use ssl?
fragmede: Google does do it after being being embarrassed into it by some security folk. The 'sign in' link on the main google.com page is ssl, as is Gmail, and http://google.com/a/domainname (at least for me) is redirecting to https.Facebook does support ssl (https://facebook.com) but the problem is that they don't forwards regular http login to it.Unless you need a wildcard domain, which you shouldn't, until you have to scale, it shouldn't cost you more than like $20 US for the cert.