Encrypting exchanged data in a RESTful

Question

I have created a Restfull web-service in java that is consumed by an android application . The work is almost done.

Now I feel the need to secure my web-service . I don't want to send a login and password for that purpose, because I'm already asking the user for it, and testing whether he exists in my database or not. What I want is to encrypt exchanged data.

Do you have any idea how can I integrate that ?

Answer 1

I recommend you to use HTTPS for your need. SSL/TLS provide better encryption decryption over https. And you don't need to reinvent wheels for this basic purpose. If you are using tomcat to host REST web serivces then here is a simple tutorial to turn on SSL in tocamt

look at this one also