Anyone experienced https ?

[eluser]WanWizard[/eluser]
Pro's:
- user will know they deal with the correct site (only if an official certificate is used)
- end-to-end encryption of the traffic, data (password!) doesn't go over the internet in plain text anymore

Con's:
- certificates are not free
- encryption/decryption requires CPU power
- might require code work if http:// is used hard-coded
- rewrite needed to redirect all http:// requests to https:// (external links etc)
- only one certificate == one hostname per IP address (unless SNI is used or a * certificate)