Two-way password encryption without ssl

Question

I am using the basic-auth twitter API (no longer available) to integrate twitter with my blog\'s commenting system. The problem with this and many other web APIs out there

Answer 1

An ssl certificate that is self-signed doesn't cost money. For a free twitter service, that is probably just fine for users.