An IP address can be an tackle which has specifics of how to succeed in a certain host, Specifically outside the LAN. SSL/TLS is very suited to HTTP, because it can provide some defense whether or not only one side of the interaction is authenticated. Here is the scenario with http://XXX