I am inclined to go with solution #1 as well. SSL by default. SSL everywhere. (And not that cheap, 40-bit junk, either.)
I am inclined to go with solution #1 as well. SSL by default. SSL everywhere. (And not that cheap, 40-bit junk, either.)