Privateness and Protection: HTTPS stops attackers from accessing the info remaining exchanged passively, thus preserving the privateness and protection on the end users. SSL/TLS is especially suited to HTTP, because it can offer some defense even if only one side from the communication is authenticated. This is actually the situation http://XXX