Compromising the consumer Computer system, like by putting in a destructive root certification into the program or browser have faith in retail outlet. SSL/TLS is especially fitted to HTTP, since it can provide some security even though just one facet from the conversation is authenticated. Here is the situation with http://XXX