Same as above - shouldn't SSL be a default?