• Thanks, I didn't think we were vulnerable, but hadn't checked.

    Not sure we want to move the entire site to SSL, though I understand what you mean here, but perhaps moving to SSL 3 would be something I can get done.