I know this has been asked before, but I am curious what all of you guys think, with the advent of programs like firesheep, released only 6 months ago. Is it a good idea to use https on an entire site? I am aware that is has speed issues, browser warning popups and the like, but how likely and serious it could get if you don't have it for every page? A friend told me it is useless if even just one part of the site where a user is logged in is not https, because people can intercept the cookies, and therefore pretend to be you and use your account as they please, including accessing the https parts.
Do you think this is where the future of the internet is going towards, and is it wise to implement it now?
The site has log in, credit card/ecommerce type pages as well as other pages that only has normal blog entry type posts. Is it still fairly alright to just use https on the log in and payments part of the site, or will it really compromise security?
What is the reason why sites like ebay and amazon until now, only chose to do it on certain parts of the site? Does that mean they are now easily hackable?
How much slower will using https on everything be... are there any other cons apart from the ones mentioned above?
Are the browser pop-up issues solvable?