Yes, please, encrypt all the things, but absolutely don't use HTTPS to do it. See Daniel J. Bernsteins pet project CurveCP (http://curvecp.org/ http://curvecp.

Yes, please, encrypt all the things, but absolutely don't use HTTPS to do it. See Daniel J. Bernsteins pet project CurveCP (http://curvecp.org/ http://curvecp.org/). He also had a talk on 27C3 (http://events.ccc.de/congress/2010/Fahrplan/events/4295.en.html http://events.ccc.de/congress/2010/Fahrplan/events/4295.en.h...).