[rst]

I was reacting mostly to the apparent exclusion of usernames, passwords, and session cookies (all exposed in net traffic) from the category of "anything sensitive".

[cperciva]

Fair point. Perhaps I should have said that the stunnel/jail setup keeps OpenSSL bugs away from the more sensitive things.