@pitaj is correct, there is no point in adding additional client-side encryption, because of the simple fact that you cannot trust what happens client-side.
So the only thing you can do is encrypt the payload over-the-wire, which is exactly what https is doing.