Isn't that what HTTPS if for? I guess you'd probably want to make sure the server was using perfect forward secrecy too but even without it you are significantly safer.