Compromising the consumer Laptop, for example by setting up a destructive root certification to the method or browser belief retailer. SSL/TLS is very suited to HTTP, since it can provide some security although just one facet of the interaction is authenticated. Here is the situation with HTTP transactions on the http://XXX