Compromising the client Computer system, including by installing a destructive root certification to the technique or browser belief retailer. SSL/TLS is very suited to HTTP, since it can offer some protection regardless of whether only one side with the communication is authenticated. This is actually the scenario with HTTP transactions http://XXX