Your API Shouldn't Redirect HTTP to HTTPS
Instead of redirecting API calls from HTTP to HTTPS, make the failure visible. Unfortunately, many well-known API providers don't currently do so.
Source: jviide.iki.fi
Stay updated with breaking news from Layer Security Cheat Sheet. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Instead of redirecting API calls from HTTP to HTTPS, make the failure visible. Unfortunately, many well-known API providers don't currently do so.