Given that the protocol encrypts all client-server communications by SSL/TLS authentication, attackers are unable to intercept info, indicating people can safely enter their own data. SSL/TLS is especially suited for HTTP, because it can provide some defense regardless of whether only one facet with the communication is authenticated. Here is http://XXX