Another question: because I use the same directory for SSL and non-SSL content, ths using relative paths, I do not wish to keep the entire site under HTTPS once someone clicks on a secure link. How do I get them back to HTTP is the area does not need to be protected. SSL sure slows things down a bit. Is placing http://domain.... for unsecured links the only way to go?

Uncheck 'Do not redirect customers from https to http' in general settings.