How to accept authentication on a web API without SSL?

Question

I\'m building a web API very similar to what StackOverflow provide.

However in my case security is importance since data is private.

• I must use HTTP.

Answer 1

HTTP digest authentication provides very good authentication. All the HTTP client libraries i've used support it. It doesn't provide any encryption at all.