We should use SSL for logging into trac and the xtras page. I'm guessing we need two (one for each) since the domains differ. I know nothing about SSL certificates. Halp? Zac