Privacy and Protection: HTTPS stops attackers from accessing the data getting exchanged passively, therefore defending the privateness and protection from the users. SSL/TLS is especially fitted to HTTP, because it can offer some defense even when just one aspect of the conversation is authenticated. This can be the situation with http://XXX