[die_sekte]

Actually, just encrypting the login is not enough. FireSheep steals session keys, not passwords. Everything that needs to have the session key needs to be served over SSL.

[chapel]

That's what I meant, but obviously didn't explain it correctly. Thanks for the correction.