When you arrive at Facebook's homepage, you'll notice something odd:
That's right! No!
To be technical, the login is still redirected to a secure login page, but how could you ever know that without viewing the source code and understanding what you see there? If the page you're on doesn't show the HTTPS protection, it's safer to just assume it's not there.
So here I offer you this simple trick whenever logging into Facebook or any other service for that matter. See that login form over there? It looks like this:
Instead of putting in your data, click LOGIN without entering any data. Leave it blank and click the button anyway
Facebook will redirect you to their secure login page where you can visibly see the security is active by seeing theand lock icons. Now you can login knowing that the chances of someone catching your name and password in transmission are greatly reduced.