Great points. Another thing to keep in mind is that traffic encrypted using 1024 bit RSA keys, which the vast majority of SSL sites use, is no longer considered secure enough to withstand brute force decryption. In fact, the NIST has recommended that all sites upgrade to 2048 bit private keys by Jan. 1, 2011. They wouldn't make this recommendation unless people with GPGPU could crack it.