Over the past few years, the world and their dog has been drumming into web server administrators that they need to use SSL, and now web browsers are not-so-passively-aggressively throwing up warning messages if a site isn’t being accessed over HTTPS. In the past, SSL has only really been enforced for login screens, or payment screens – but this is no longer considered sufficient, and there are very good reasons for this: