HTTP transport is a web-based communication path that carries requests and responses between a client and a server. In practice, it is the layer that lets software talk over HTTP instead of a local socket or another protocol. In security-sensitive systems, that transport is part of the trust path, because it determines how messages move, where authentication is checked, and what network intermediaries may see or modify.
Cyber attackers often target HTTP transport indirectly by abusing proxies, redirects, hostile servers, or weak request handling to capture tokens or alter traffic. Defenders care because mistakes at this layer can expose credentials, break authorization checks, or let an untrusted service sit inside a trusted workflow. In AI integrations and SDKs, HTTP transport becomes especially important when OAuth or other delegated access is involved, since the client must ensure that tokens stay within the intended trust boundary.