SSL/TLS is particularly suited for HTTP, as it can provide some security even when only one side of the conversation is authenticated. This is the circumstance with HTTP transactions over the Internet, in which generally just the server is authenticated (because of the customer inspecting the server