Hi,
Use https indeed. SSL is the only good way to secure internet communication. but as always, if someone is serious about stealing data, he won't try to do that brute force. He will either spy directly on your computer or directly on your server...
Bye,
Jean