Should we encrypt data on our own if using SSL?
<p>When we transfer our data over SSL, we are pretty sure that this data is not manipulated or read. But I have seen some programs installed on client and they are enabled to open SSL packets and show them. So a user will notice what we are sending and to which endpoint. The user then is able to repeat a request then which may cause some problems. </p>

<p>So Should we encrypt the data on our own a little maybe to harden this procedure or it is not that necessary ? Can we rely on SSL for security or we should add it some sugar? </p>