What does a SSL stripping attack look for to perform an on$-$path attack?

Group of answer choices

A$.$ An unencrypted HTTP connection

B$.$ A DNS query that is not protected by DNSSEC

C$.$ An unprotected ARP request

D$.$ All of the above