Unless the whole page uses HTTPS, securing just the login might still leave you vulnerable to session hijacking and just gives you a false sense of security. D

Unless the whole page uses HTTPS, securing just the login might still leave you vulnerable to session hijacking and just gives you a false sense of security. Don't use your gmail (ebay, paypal,...) password for test-driving a site you saw on HN.