If you are on 3.0.13 or later of Firefox, or the most recent version of Safari you are fine. If you are using any version of IE, you are toast until the hole is plugged by MS. This of course doen't mean that a "good" SSL connection can be tapped, only that you can't know if you have a "good" connection at any time on any site. :)