I am part way through creating a 3rd party service for an online game. Currently to pull the game data from outside the game I use my own auth cookies, however, I want to make this available for other players to use to see their personal stats and what not.
I can send the cookies from the game via a userscript or plugin. However, I want to ensure I'm handling their information securely. The cookies are stored in an AES encrypted table.
When sending from a userscript to a webserver via a XMLHTTP request, how can you ensure the security of the data during transit? Does SSL work when sending cross-domain?