One of the better benefits of SSL is the ability for me (the client) to know the content I requested from you (the server) is in fact the content you intended to send me. Some ISPs will insert their own ads/tracking into non-SSL pages since they can transparently edit them before passing the data along to their customers. With SSL the data is encrypted through the entire trip from server to client so without non-trivial Man-in-the-Middle SSL stripping the ISP can't edit the content in transit.
Even for non-credit card transactions you don't necessarily want anyone sniffing your transactions. Everyone on the same WiFi network or Ethernet segment can sit with Wireshark open and slurp up unencrypted data. This can leak things like reused usernames, email addresses, phone numbers, or poorly protected passwords.
Thanks for doing the work to set up SSL!
|