SSL/TLS is especially suited to HTTP, because it can provide some defense even though just one side of your conversation is authenticated. Here is the scenario with HTTP transactions on the internet, in which normally just the server is authenticated (because of the client inspecting the server'