Secure Logons vs. Secure Sessions

The following was copied/pasted from an article that discussed the [in]security of so-called "secure" websites.   Due to other content in that article, I have opted not to include a link to it.   In short, what it's saying:   Secure Logins are NOT enough... be sure that the site you're accessing maintains secure mode throughout your entire session there.

"Well-meaning websites use secure http, or https, at least during the login stage. This is vital, since it protects the username and password you submit. Once you have logged in, the site sets a browser session cookie which is unique to your login session...

But many websites take the easy way out once your session cookie it set, reverting to regular, unencrypted http for the rest of your session. After all, your username and password are not needed again, so the need for encryption has passed. Right?

Wrong.

Reverting to insecure traffic brings its own intractable security problem. It exposes all of the rest of your session to interception, including the session cookie, which is transmitted in the headers of every http request to the site".