[Hybrid_theory]

In order to see say a password for hotmail. With Cain and abel he has to spoof a certificate of it first. so if you use firefox it will say warning this is a self signed certificate. you can make an exception. if you do you are trusting that site. keep in mind there are very few sites that have self signed certificates. hotmail is not one of them. So as long as you click "get me out of here" he cant steal your passwords. But you cant use the site either. if this doesnt happen and u can use the site and its https at the top. This is ssl encryption straight to your machine, its all good.

Another thing he can do tho is poison your arp. a friend tested this in class with me

he was able to sniff packets then and read my msn conversations.