Files
api-guidelines/protocol/tls.md
apidesigner 4526f3d8a3 Updates protocol/separate-concerns.md
Auto commit by GitBook Editor
2017-02-14 14:46:41 +00:00

321 B

Transport Layer Security (TLS)

Every API MUST require secure connections with TLS. That is, an API using the HTTP protocol MUST use HTTPS.

Any non-TLS requests SHOULD be ignored. In HTTP environments where this is not possible, a non-TLS request SHOULD result in the 403 Forbidden response.