Via one of the NULL-cipher suites? That&#x27;s a somewhat expansive definition of &quot;can&quot; and &quot;HTTPS,&quot; since most if not all browsers are unwilling to negotiate any of those suites. Indeed, most SSL libraries make it hard to use those suites: for instance, OpenSSL says (`man ciphers`), &quot;Because these offer no encryption at all and are a security risk they are disabled unless explicitly included.&quot;<p>Which makes sense, since they&#x27;d have the exact same problems as an explicit HTTPI protocol, just even more confusing: you&#x27;d want to not send things like secure cookies across those ciphers, you&#x27;d have to handle mixed content with actual-HTTPS carefully, etc.