SQL connection security

I have two question about SQL user connection security ...
Is standard (or necessary for small company) deploy for authentication using SQL - SSL for better security ?
If I had understood correctly Kerberos is used only if used Windows Authentication ...

Hi,
I believe it would be better off to use windows authentication, however, if you cannot do that, then use latest version of SQL from SQL authentication should help.