When a web server interface is used for remote or local administration, an attacker with access to the local network may be able to sniff plaintext HTTP packets to gain confidential information.
NIST Recommendation
If possible, do not use an HTTP server. If it is necessary to use a web server for remote administration, use the more secure HTTPS (HTTP over SSL or TLS) protocol.
How Messaging addresses the vulnerability
By default Messaging uses HTTPS over SSL and TLS.