Software Engineering · Security
HTTP over TLS — the transport layer is encrypted so credentials and data can't be read or tampered with in transit.
In practice: Non-negotiable for anything handling credentials or personal data. Browsers now actively warn users about HTTP pages and restrict modern APIs (like service workers) to HTTPS contexts only.