Dangers of SOAP: Payment gateway WSDL sent over HTTPS but all actions are HTTP

I don't think it's a great idea to link directly to the WSDL for what looks like a production system without indicating this in the HN title.<p>I was expecting an article describing how it is possible to make this mistake - not raw WSDL!

Maybe I'm missing something, but how is this a danger of SOAP? You could misconfigure any endpoint.