Since the protocol encrypts all customer-server communications by SSL/TLS authentication, attackers simply cannot intercept details, meaning users can safely enter their personal information. SSL/TLS is very suited to HTTP, since it can offer some safety even if just one side of your conversation is authenticated. This is actually the case http://XXX