The problem is that most users are not programmers, are not at all interested in computer security... So, no maybe most people here would not use an important p

The problem is that most users are not programmers, are not at all interested in computer security... So, no maybe most people here would not use an important password for yc news... But the average user doesn't think about this and knowing this can you really say that it's there fault for not being educated on computer security? Anyway, since you do the right thing: SSL + bcrypt, good but don't say it's the user problem if the system gets compromised...