title: Understanding the risk of non SSL login forms
body: <p>As a user of web applications, I tend to only sign up for services that use SSL secured login forms.  As a developer, I know the risk is that non SSL forms are transmitted in plain-text and an unscrupulous individual could "sniff" the HTTP traffic and ascertain my login and password.  </p>
  
  <p>However, what is the true risk or possibility of this happening if I'm say, at home, on my DSL or Cable internet connection?  Where would the packet sniffer need to be running?  Could packets be sniffed at any point back to the server?  Is it easier to "sniff packets" in a corporate network with a larger LAN, as opposed to being at home?    </p>
  
  <p>I've developed web applications for quite a while, but I've never truly understood this.  I would love to get some clarification on this.</p>
  
  <p>Thanks.</p>