Facebook recently started allowing secure connections and HTTPS based controls are gradually improving

Facebook – HTTPS based security improvements

QUOTE: There’s been some encouraging progress since then, and this is now what happens when a non-HTTPS application is accessed. So at least the setting is persistent. Hopefully the feature will be more dynamic in the near future. If you have a Facebook account, and want to update your settings for HTTPS, you’ll find the option under Account Security.