Any company not comparing every major password breach against their own users' credentials (especially the freakin' staff!!) (not to mention having a higher authentication barrier for staff) should be ****.

Ehtyar.

My hope is that any kind of significant widespread monitoring of the internet will serve to promote the use of SSL. Granted SSL is flawed, and will continue to get more expensive to implement until Microsoft wake the f**k up or IPv6 is fully deployed, but it should be sufficient to protect those of us who care (and thus keep one of our own eyes on the SSL certs and ciphers our browsers are accepting).

Ehtyar.

Ehtyar.