Just checked a book and found that no encryption is performed on the text of a password textbox so they cannot be assumed as a security mechanism.

Should I provide my site with SSL capabilities then? What are the alternatives to SSL?

TIA,