HTTPS by default would be strongly preferable, however the option of at least turning it on would be a good start. It would be good to have this support before the API lands, so we don't have to deal with broken clients that don't support accessing the API over HTTPS.
HTTPS by default would be strongly preferable, however the option of at least turning it on would be a good start. It would be good to have this support before the API lands, so we don't have to deal with broken clients that don't support accessing the API over HTTPS.