Secure API Over SSL

[frodofromtheshire]

Hi, i have written a simple rest web service which must be accessed via SSL. For example:

https://www.mydomain.com/api/GetData.

Now say i expose my service and allow anyone to consume it. Do the people consuming it have to worry about SSL or is getting/posting data from a secure enough?

I'd appreciate your help. Thanks

 

[jmeckley]

SSL secures the communication between client and server. no one can eavesdrop on the packets transmitted. but anyone could still access any of the API calls. if you want to secure the API you will need to include authentication and authorization to verify who is making the request.

Jason Meckley
Programmer

faq855-7190
faq732-7259

 

[jbenson001]

For our API, we give each application an API key and authenticate based on that.