Is SSL just for authentication required applications?
No, if you consider the transmitted data between you and the visitors as private you should use SSL. Most of the following component should always be over SSL: • Authentication and after authentication pages; • Contact Forms; • Search forms and result pages. Search and results pages maybe looks like overkill to you but imagine you open all of your google searches to public. I bet you don’t want to know people about your deep obsessions, health status, your applications error messages, your home address (google maps), your phone number etc.