I am building a small website to learn web development.
I would like to have a secure authentication system. After some reading, it seems like there is no way to send the credentials to my server without SSL/TLS connection.
However, an SSL connection is not suitable for me for the following reasons:
- It is complex;
- It is (most likely) not free
Is there any alternative that I could use to handle authentification ?
More specifically, I would like a way to transfer the user credentials from a form in my html page to my server without it being easy to steal using packet sniffing.
Setup: Arch Linux (ARM), Nginx, NodeJS, Mongodb