Use HTTPS to protect against man in the middle attacks.