Files
api-guidelines/protocol/tls.md
apidesigner 4526f3d8a3 Updates protocol/separate-concerns.md
Auto commit by GitBook Editor
2017-02-14 14:46:41 +00:00

4 lines
321 B
Markdown

# Transport Layer Security (TLS)
Every API **MUST** require secure connections with TLS. That is, an API using the HTTP protocol **MUST** use **HTTPS**.
Any non-TLS requests **SHOULD** be ignored. In **HTTP** environments where this is not possible, a non-TLS request **SHOULD** result in the **403 Forbidden** response.