Two-way password encryption without ssl

Question

I am using the basic-auth twitter API (no longer available) to integrate twitter with my blog\'s commenting system. The problem with this and many other web APIs out there

Answer 1

If you don't want to use SSL, why not try some other protocol, such as kerberos?

A basic overview is here: http://www.kerberos.org/software/tutorial.html

Or if you want to go somewhat more in depth, see http://www.hitmill.com/computers/kerberos.html