I like ssl for logins and signups and if it is something important or sensitive (like say email) for the whole interaction.