In this mode, TLS is susceptible to man-in-the-middle attacks. This should be used only for testing.
HTTP clients are used for executing hooks such as the ones used for custom actions, external authentication and pre-login user modifications. This allows, for example, to use self-signed certificate without defeating the purpose of using TLS