Re: https for virtual hosts (was: attack on paypal)