Without having read the article, would I be correct in guessing that the method used is :
1) When user hits submit, send a 'blank' request for the https page
2) Fill in the blanks on the https page on client-side
3) Submit the https page with the login details back through the secure port