Compromising the client Personal computer, for instance by setting up a destructive root certification into the program or browser have faith in retailer. SSL/TLS is particularly suited for HTTP, because it can offer some security even though just one facet in the conversation is authenticated. Here is the situation with http://XXX