Detached Credential Collector

Using a DCC to redirect logins from a Load Balancer to OAM before accessing a protected resource - can the communication between the LB and the resource be in clear (HTTP) instead of HTTPS after the secure authentication using the DCC, OAP and OAM? I want to offload SSL for performance and inspection of data at the LB and do not want to put extra work on the firewalls in respect of pure transactional information.