It's not just the certs, though -- it's also the CPU necessary (SSL connections are, I'm assured, very CPU-intensive). We already do use SSL for anything that involves sending passwords or financial data or anything else sensitive; this is more along the lines of, browse the entire site in SSL all the time no matter what's being transfered, which (if popular) would be a massive performance hit.