I love SSL. If it weren't for the extra payload that it puts on both the network, client, and server I'd suggest it for everything. I've baked-up a quick Apache mod_rewrite recipe that will force all traffic to SSL:
RewriteEngine On
RewriteCond %{HTTPS} !^on$
RewriteRule ^(.*)$ https://mydomain.com$1 [R,L]