I have a login screen which I\'m serving over SSL. The user fills in their login/password, this gets POSTed to the server. At this point I want to jump out of SSL, so I re
Gmail, yahoo, etc. use SSL for an encrypted iframe, which authenticates, but there's none of the in-page redirection you're talking about. The whole page isn't encrypted for these login systems.