I don't use the default login block but set a link to the login page in the footer block:
<a href="https://www.example.com/drupal/user">Member Login</a>
This method doesn't prevent that a user can login via http either, but in the normal case she/he will use the easiest way and that means to click the link in the footer ;-)
Regards, Sebastian H.
Geoff O'Callaghan schrieb:
Hi All,
Running D6. What's the best practice for setting up a site where content is delivered by http *until* the user logs on and from then on I want all content to be via https.
Cheers Geoff
-- [ Drupal support list | http://lists.drupal.org/ ]