Even with SSL though, an eavesdropper would know: a) What site(s) you were accessing (the IP address is visible, and as it can't be a shared IP, a DNS lookup o

Even with SSL though, an eavesdropper would know: a) What site(s) you were accessing (the IP address is visible, and as it can't be a shared IP, a DNS lookup or SSL connect to that site should give them what site) and the length of time on each site. b) The approximate size of those pages, and the number of embedded items, so could quite probably and within reasonable time know what pages. c) If they knew your browser (through seeing non SSL traffic) they could probably know the length of the URL. Have you really gained anything through using SSL??