Hi.
Imagine a social app where you sign up with a username and password before you can fully enjoy the wonderful experiences found everywhere inside the network of the app. Now this is my logic I have thus far: The app sends the username and password (un and
pw hereinafter) to a server for processing. The server writes a record of it to a database table. Every time the end-user signs in the app send again the un and pw and validate it against the record. The Post request is over http.
My question is how can I keep the un and pw secure for as long as the end-user remains a member on the network?
Thank you.