> Most of these things were once said about sites that used SSL. in the sense that every possible thing has been said about everything, sure. and to a slightly

> Most of these things were once said about sites that used SSL. in the sense that every possible thing has been said about everything, sure. and to a slightly greater extent maybe they were said about trying to SSL-ify _everything_. but "gee maybe shouldn't SSL-ify sites handling sensitive data" has never been a serious talking point.