Compromising the shopper Pc, including by setting up a destructive root certification in to the process or browser believe in keep. SSL/TLS is very fitted to HTTP, since it can provide some safety regardless of whether just one facet of the communication is authenticated. This is actually the scenario with http://XXX