Sorry, but I think Firefox is doing exactly the right thing (by default) here. If you want it to do something else, I'd imagine there's a setting you can override somewhere.

In practice it is worse than no SSL because it provides a false sense of security to users who have been trained that HTTPS = secure.