title: Security concerns about redirecting from HTTPS to HTTP?
body: <p>I have read on some blog (<em>sorry for not mentioning the reference but I can't find it anymore</em>) that you will lose all your work on securing your site if you redirect a user from an https page to an http page.</p>
  
  <p>So, could someone please explain to me if I am right or wrong here in the following scenario:</p>
  
  <ul>
  <li><p>Is it right practice to use https on the login page then redirect him to Admin Page with http, or will this will create a security issue like Session Fixation hijacking, stealing session, etc.?</p></li>
  <li><p>Or must I keep the Admin Page also in https? </p></li>
  </ul>
  
  <p>Another side of the question is: will https allow caching of static files?</p>
  
  <p>I have read other articles here but I am still confused as some say 'yes' and some say 'no'; also some say it depends on browser.</p>