Question: On some websites, the login page (where you enter your login details) is served by a regular HTTP connection with no encryption. However, once I login, the page immediately switches to a secure HTTPS connection when displaying my account details, etc. It seems that using SSL after the password is entered is pointless, as an attacker can already intercept the connection and get the login details. Is securing the data after the login is entered have any security benefit whatsoever, or is it just a false sense of security?

An example of this is the [Corsair Force](http://corsair.force.com/) website.

Answer: 
Especially on a login page the entire page should be https. Making, of all pages, the login page http and putting the https under a button is bad practice in my book.

This makes it a lot easier to perform MiTM/SSL strip attacks by replacing the https action under the button with a simple http link and no one can tell unless they inspect the source (as buttons don't show the link they are referring to as opposed to regular links in the content). And even when inspecting the source, as some browsers reload the page when showing source, there is no certainty. 

Happy to hear reasons that contradict this, but I don't see why a login page should EVER be http on purpose when the rest of the site is https other than insecure development of the site.
If you take a look at the form posting your login details you will see the following:

```
action="https://corsair.secure.force.com/SiteLogin?refURL=http%3A%2F%2Fcorsair.force.com%2F

```

This action is in fact posted over SSL/TLS. In an ideal world, the whole site is SSL. Currently, for the site in question, the login details are posted over a secure channel.

An attack vector could be a MiTM (man-in-the-middle) attack. For example, when you hit the login page, they could inject another action into the form element. 

To answer the question, SSL provides the benefit that data transmitted cannot be viewed or tampered with by a 3rd party. SSL on a site after the login crediential were passed would still provide the above security measures. Obviously your credentials would now be known to an attacker, who could then log in as you.