PHP Two-station data interoperability problem

Title
I now have the Data interface API defined on the PHP side. Returns the JSON-formatted data that is passed through the HTTPS protocol. I would like to know when accessing the data interface to do encryption or what operation, afraid of data transmission is not secure. Ask for comment, ask for discussion ...

For example: A is the original site, B website through the data interface Https://xxxxx/login?name=xx&pwd=xx login, our data interface return login results. The old feeling is not safe.

Reply to discussion (solution)

HTTPS is safe enough, a wall so brave can not intercept it

HTTPS is safe enough, a wall so brave can not intercept it

Is it? Simple encryption of transmitted data can also be omitted?

Learning is not very clear

At night, come on, let's talk about it, haha.

Encryption is not a difficult thing, encrypt it.

HTTPS do not worry about this problem, if the hacker to the HTTPS are cracked, then you write encryption algorithm cracked up what is the difficulty?

