4 ms·
The API should still allow HTTP requests. No cookies are involved, so they shouldn't be vulnerable. I would like to keep things all SSL for consistency, but I
by technoweenie 16y ago
The API should still allow HTTP requests. No cookies are involved, so they shouldn't be vulnerable. I would like to keep things all SSL for consistency, but I think that'll require a bit more notification to API developers.