eBay still does not use SSL for passwords. Although there is an option to use it during signin, this is largely negated by the fact that you have to continuously re-sign in to perform various commands, the fact that you cannot have SSL be the 'default' login, the fact that most eBay sellers are not techno-knowledgable enough to understand what secure-sign-in is anyways so they wont click the tiny 'secure signin' link, and the fact that the eBay 'change your password' web page not only sends your new password back to them completely unencrypted but also has no option for using SSL to do the change.