SSL/TLS is very suited for HTTP, as it can offer some defense even if only one facet on the conversation is authenticated. This can be the case with HTTP transactions online, wherever commonly only the server is authenticated (via the shopper examining the server's certification).