True, as long as the site isn't doing referer checks, which most of them probably aren't. This is yet another argument for why the entire web should be secured

True, as long as the site isn't doing referer checks, which most of them probably aren't. This is yet another argument for why the entire web should be secured with SSL.