WCF REST custom security

I've created WCF Rest service which must be available in internet. For authentication I use HMAC from this msdn article. For encryption data in response I use AES from .NET instead of SSL certificate. Is it secure enough?