I love SSL.  If it weren't for the extra payload that it puts on both the network, client, and server I'd suggest it for everything.  I've baked-up a quick Apache mod_rewrite recipe that will force all traffic to SSL:

RewriteEngine On
RewriteCond %{HTTPS} !^on$
RewriteRule ^(.*)$ https://mydomain.com$1 [R,L]