What proportion of mobile phone users can access the web through it?

Designing web application password system: possible to prevent interception without SSL/https?

• Hi, I was never good at cryptology or whatever you call it =p I'm trying to design a relatively secure web application. First off, how high is the risk of interception? The server is relatively secure, hosted by a trustworthy company. However users could be using unsecured wifi, dodgy ISP's etc. But my main question - assuming that interception is the bigger weakness in the system, is there a technique or algorithm which would prevent interception without the server needing an SSL certificate etc? I'm not bothered if users don't have javascript enabled, they don't deserve access. If relevant, sharing some kind of key with each user safely isn't a problem, it can be done over the phone. Thanks

• Answer:

  I found a very useful javascript utility that is used to secure a page, but I'm pretty sure you can convert it to work for your needs. This uses URL based encryption (it's beyond me, but the page does have an explanation). It is written in Javascript so no guarantees on security, if you would be sending sensitive information, I would highly recommend an SSL certificate.