Ah, I love the sound of that...

There is a reason you should use https:// for everything.

As for someone saying it doesn't have anything to do with wifi ... well it does in the sense that many people inherently trust wifi as long as their login credentials don't travel unencrypted ... now lousy web 2.0 programming + wifi sniffing has proved the contrary.

That's one of the reasons my wi-fi zone is treated as a separate, "high risk" zone. I tunnel port 3128 through SSH down to my firewall/server and use the tunnel to use the server-side proxy. That ensures *all* my traffic goes through a secure link while traveling the "secure" wifi link (even with 128-bit WEP, I don't trust that).