title: XMLHttpRequest over SSL from unsecure page
body: <p>How secure would this setup be ?</p>
  
  <p>Unsecure page 'http://www.site.com' makes an XMLHttpRequest with POST 
  to url 'https://www.site.com/dosomething.asp'</p>
  
  <p>The page dosomething.asp has header 'Access-Control-Allow-Origin: <a href="http://www.site.com" rel="nofollow">http://www.site.com</a>' set
  and returns some user related data that needs to be secure.</p>
  
  <p>No errors, all goes well.</p>
  
  <p>How secure is the actual POST request ?
  How secure is the responseText from this request ?</p>