The argument for using SSL is to prevent some malicious user who has gone through the pains of snooping your traffic being able to read your traffic. So while it may make se
I don't think that every website needs SSL, if you do then use it, but there are cases where you want to be able to authenticate user without having to use SSL.
I've created (javascript->perl) single use random hash authentication for just this purpose.
http://www.furiousgryphon.com/jauthenticatedemo.html
https://github.com/thomasoeser/jAuthenticate