Gathering session cookies with Firesheep

I suppose one workable solution (in some cases, probably good enough for LWN) is to have two session id's for each user, one that's SSL/TLS only one that is available over HTTP, then use the HTTP cookie to present customized content, decide if you're logged in, etc. Then when the user takes some action that needs to be authenticated switch to HTTPS (ie clicks a "Post Comment" button).

Obviously there are issues with this (one of which being it'd be hard to make sure it really is secure enough, and get the implementation right), but it's probably viable for situations where for most stuff there isn't a real risk for a MITM (ie a MITM can't really do anything of consequence))