Hotspot Security .. SSL !!?

hi friends
i have 2 Question :

  1. Can One of My Customers When Connected to my Wlan’s , Sniff Other People Customers User&Password ? (Like Software : Cain )
    i Use HTTP-CHAP , Cookie

2.How to Use SSL (HTTP-PAP) ? , i Sould to Buy a SSL Certifacte ?
i Can Hotspot Services in Mobiles Phones Have Wlan Network , No Problem With SSL ? , Some of My Customers Have IE 6 No Problem For That ?

Thanks

If you use http-chap, you can see user names with a sniffer. The passwords are md5 encrypted with a server challenge. Unless you want the “unable to verify this certificate” warning, you need to purchase a SSL certificate.