API Design Patterns
Always Use HTTPS