Files
api-guidelines/protocol/tls.md
apidesigner 67b0b5614e Updates protocol/use-appropriate-status-codes.md
Auto commit by GitBook Editor
2017-06-19 08:55:59 +00:00

4 lines
329 B
Markdown

# Transport Layer Security (TLS)
Every API **MUST** require secure connections with **TLS 1.2**. That is, an API using the HTTP protocol **MUST** use **HTTPS**.
Any non-TLS requests **SHOULD** be ignored. In **HTTP** environments where this is not possible, a non-TLS request **SHOULD** result in the **403 Forbidden** response.