It's interesting that this is from 2009 -- even in 2009 it was trivial to sit at public wifi points or plugged into corporate networks and grab credentials as t

It's interesting that this is from 2009 -- even in 2009 it was trivial to sit at public wifi points or plugged into corporate networks and grab credentials as they went over the air/wire unencrypted -- even more so then since at the time the public hadn't yet caught on and SSL was more rare on sites/services than it is today, and since not everyone yet had a smartphone in their pocket with highspeed net access. In my opinion, implementing SSL is really more about preventing mass capturing (and later forging) user identities/credentials than it is about trying to create either perfect security or preventing an attack on a server.