Substitute “HTTP” with “SMTP” and you already have that today… SMTP in plain text isn’t generally used anymore, it’s always transported over TLS. Of course you can run whitelist-only, but how is that ever going to work?
SMTP is text based and we’ll defined, so I would also argue that the transport being “simpler” is nonsense.