API Shouldn't Redirect HTTP to HTTPS(jviide.iki.fi)
584 points by oherrala | 252 comments
Blog post arguing that APIs should fail visibly on plain HTTP requests instead of redirecting to HTTPS, noting many major API providers don't.
1 story on the front page, newest first. Scroll down to watch the site change over time.
584 points by oherrala | 252 comments
Blog post arguing that APIs should fail visibly on plain HTTP requests instead of redirecting to HTTPS, noting many major API providers don't.