网站如何安全地支持http（非SSL）会话？

I note that some sites (such as gmail) allow the user to authenticate over https and then switch to http with non-secure cookies for the main use of the site.I note that some sites (such as gmail) allow th