search

openpermit / openpermit.github.io

The OpenPermit Specification defines standards for streamlined permitting
http://www.openpermit.org
4 stars 0 forks source link

HTTPS a requirement? #24

Closed mheadd closed 9 years ago

mheadd commented 9 years ago

HTTPS is quickly becoming a requirement for government websites & services. Should we make this a requirement in the API? Or is that a detail best left for specific implementations?

mmartin78 commented 9 years ago

I believe that is an implementation detail. Normally, the read-only public data APIs will not need HTTPS, but you could host them under HTTPS. The transaction APIs if/where supported must be done under HTTPS. I do not believe these decisions belong in the standard though.