title: Security for the login page (using Servlet/JSP)
body: <p>I am toying with servlets and jsp. I wanted to create a simple app. Upon entering there would be login page. User could enter his login/password or register himself. I was wondering, if I would want to secure the password from being "intercepted" should I use https? Or is there some other way to secure the password on application level?</p>
  
  <p>If it is only way, is it possible to restrict access to an app only from https? (I am using Tomcat if it is relevant).</p>