[OSM-dev] Protecting the login pages

Hi All

I'm currently at a geeky event, which provides free wireless. I'd be 
dissapointed if there wasn't at least one person sniffing the wireless to 
watch interesting things going past.
What do people thing about protecting the login pages (main site, and the 
wiki). Could we get a certificate (paid for, or from cacert etc) and ssl 
protect them? How about a javascript widget to hash the password with a 
challenge?
For now, I think I'm just going to tunnel back to somewhere I trust before 
logging in to upload traces....
Nick