title: Sending data securely in a POST to a REST API
body: <p>I would like to send some "private" data on a POST request. This data is placed in the body and sent over TLS so it is encrypted.</p>
  
  <p>Additionally to the TLS encryption is there any other mechanism that should by applied to protect that data?</p>
  
  <p>Update</p>
  
  <p>In order to have not only transport layer encryption but application layer encryption to guarantee confidentiality, as NinjaSecurity suggested currently I client encrypts with a private key and server decrypts with the public key. This mechanism requires key exchange between server and client side and clients must be able to perform asymetric encription which may be a bit painful depending on the language used in the client side. The question is: Transport layer encryption is enough to assure confidentiality or data could be compromised from transport layer to application layer?</p>
  
  <p>Thanks,
  Ivan.</p>