title: Is it necessary to hash data POSTed if using SSL?
body: <p>In some sensitive apps, like payment systems, code is set up as such: when user sends info to server, for example:</p>
  <pre><code>{money_amount: 5, receiver_id: 2}
  </code></pre>
  <p>It's also required to send over a hashed string, like:</p>
  <pre><code>hash_by_client = make_hash_from_string(&quot;money&quot; + money_amount + &quot;receiver&quot; + receiver_id)
  </code></pre>
  <p>The purpose: so that when server receives the data, it independently, but using the same algorithm, computes another hashed string (<code>hash_by_sever</code>) , and compare <code>hash_by_sever</code> with <code>hash_by_client</code>. If they are equal, then server is sure the POSTed data is not modified, and can be trusted to proceed.</p>
  <p>Question: if we are using SSL/TSL/https connections, is this setup still necessary?</p>