Facebook has at long last offered an option to use the encrypted "HTTPS" protocol, a feature it will begin rolling out today but won't finish for a "few weeks." You should check now if it's available, and sign up as soon as it is enabled for your account.
Read more on this here
http://gawker.com/5744229/the-facebook-setting-you-should-change-as-quickly-as-possible
