For development I am using a normal HTTP connection, but when going to production,  we can establish the connection over TLS to avoid packet sniffing.