I strongly support the adoption of SSL site wide (at least the option for it, let the user decide if they don't want it). If nothing else it could be tied into premium access on pages outside the login page (but securing the login page for all users accessing it). I think even a basic self signed certificate would be pretty appreciated by those interested in securing their connections to TER although a spiffy proper SSL cert would be all the better.