what sites should use ssl?
mattew: We try and make sure all our clients use SSL for authentication and transfer of secure data.  Just because Facebook and Google aren't as conscientious as they should be doesn't let you off the hook.You don't need to pay a few hundred dollars for an SSL certificate, unless you need a wildcard.  Go with a cheap reputable Certificate Authority and start this out right.