HMB does not implement SSL, HTTP compression and authentication, so when providing the HMB service you usually want to have HMB behind a reverse proxy. Below is an example Apache configuration using mod_proxy and mod_deflate and implementing basic authentication. In some cases you may want to expose only a subset of methods or use different credentials for sending and receiving.
ProxyPass /hmb/busname/ http://hmbserver:8000/busname/
ProxyPassReverse /hmb/busname/ http://hmbserver:8000/busname/
<Proxy http://hmbserver:8000/>
AuthType Basic
AuthName "HMB"
AuthUserFile /srv/www/hmbusers
Require valid-user
SetOutputFilter DEFLATE
SetInputFilter DEFLATE
</Proxy>