⟩ Can we use SSL to encrypt the App communication?
Yes. On WordPress.com blogs, all communication (done over XML-RPC) is by default going to use an encrypted connection via SSL. For self-hosted WordPress, if you have SSL enabled, WordPress 2.6.1 or later supports pointing the RSD information at the “https” version of xmlrpc.php which creates an encrypted communication link with the App.