i'm working on a project which works very much with ajax (made via jquery).
how we want to secure the project more and set it up with https. now i have two questions:
- is it possible to make ajax requests to a https site with all the security features?
- is it possible to make normal (http) ajax requests but with a certain security level like authentification? that the requests always have something like a username and a one time password? (but anyway this would be bad because the requests would be send in plaintext)
need to know more about secure ajax requests