Comment by tarekmoz

I've stopped reading at: "You could use SSL/TLS to solve this problem, but that's expensive and complicated."