I could not find a clear answer, but if I have the following situation: I browse to a page let's say http://www.example.com/index.html
Now I use a form on this page to do a postback with jquery's ajax functions to the following URL: https://www.example.com/login.aspx (aspx could be anything, mvc, webforms, php, ruby etc).
Is this safe or not? I realize that not the whole session is secure.
Or is this safe, but will browsers complain about it? Will it be safer to use a entirely different domain? https://www.example.org/login.aspx