[cmer]

It would be very interesting if you could write a blog post and an example project illustrating how to do this. I think many could benefit from this knowledge.

[YuriNiyazov]

I'm afraid that the end conclusion of that blog post would be the same that jashkenas mentioned in the GP: serve your whole site over HTTPS.