Personally, I think every site should be run over ssl. The world would be an interesting place if this were the case. Not that I'm disagreeing.. But agencies that like to track people would have a heck of a time...