I need to frequently communicate with a server in the manner do stuff related to x or send me info of x
My thoughts are to directly put the task I want to be executed into the package I want to send, add some SALT and encrypt it using a monthly changing public
gpg key. Since every user will have a public and private key, too, the package will be signed by them. This blob will be used client-side.
The server does the same but with it's key to sign and the public key of the specific user to encrypt.
Everything is sent through simple HTTP, though HTTPS would be possible, too. But is it worth it for that particular protocol? Can this even be a safe protocol? What vulnerabilities does it have? Is it considerably fast? What else should I use if any answer to the previous questions implies a highly insecure way of communicating?