I've used this for a few months now. It ugrades non-https connections on secure pages automatically. Very useful. Even big sites like microsoft, google images serve things over http
dom.security.https_only_mode = true
dom.security.https_only_mode = true
For example: Twitter would periodically refuse to load. You'd have to force refresh Twitter for it to load once again.