The next thing that we are missing is of communication between client and server so that nobody can sniff and read data over the network. For this purpose, we will use SSL (Secure Socket Layer). As this book is not about encryption or cryptography or server setup, we will not go into the details of these concepts, but it is important that we talk about encryption here. If someone is to sniff data over the network, then our website or web service is not secure.
In order to secure our web service, we will use HTTPS instead of HTTP. The "S" in HTTPS stands for Secure. Now, the question is how we can make it secure. Probably, you would say that we will use SSL as we said earlier. So what is SSL? SSL is Secure Socket Layer, a standard way to secure communication between server and browser. SSL refers to a security protocol. Actually SSL protocol had three versions, and they were insecure against some attacks. So we actually use is TLS (Transport Layer Security). However, we still...
