I'm not sure whether this should happen or not, but it doesn't look right.


If a customer (or Admin) logs in and SSL is on, they get a message:


You are about to be redirected to a connection that is not secure.



The information you are sending to the current site might be retransmitted to a nonsecure site. Do you wish to continue?



[Yes] [No]



The only exception is if they are forced to log in because they were trying to checkout. In which case it stays secure because the checkout area is secure.

Oh, one other thing, if you have the option to "Redirect Users To Homepage On Login" option checked under the user settings in the admin, you would see this if you had SSL enabled. We could potentially make it so that we forward back to a secure version of the home page, but this is not a good solution either since all of the images on the homepage could be loading from non-secure sources and then you would get a bunch of errors stating that the page contains non-secure elements. Unfortunately there is nothing that we can do about this, it is the way that browser security works.