It should be noted that SSL connection encryption is baked-in to all editions (including Express), which is the key player in preventing man-in-the-middle attacks. 😉