What could be a good reason to encrypt viewstate when a post without SSL will send the form data in plain text anyway? ...