Instead of redirecting API calls from HTTP to HTTPS, make the failure visible. Unfortunately, many well-known API providers don't currently do so.
  • towerful
    5·
    7 months ago

    Invalidating creds sent over http is a great point!