embedUR systems interview question

How is HTTP protected ad HTTPS?