Does the SKY API enforce HTTPS? Is HTTP supported?

Jorge Barajas-Ramirez

Hi all,

I noticed that all documentation examples use an https:// endpoint, but I haven't found an explicit statement confirming whether HTTP requests (http://) are rejected or redirected.

Can someone please confirm:

• Does the SKY API enforce HTTPS for all requests?
• Are HTTP calls explicitly blocked or directed?
• Is there any official documentation or security policy that states this?

I'm specifically looking for assurance that all calls are secure especially when retrieving query results via the URI returned from the Query endpoint.

Thanks in advance for your help!

Alex Wong

@Jorge BarajasRamirez
never tested it under HTTP, so don't know for sure, but I do not think it make sense to allow via HTTP.

@Erik Leaver maybe able to find the doc on this for you

Chris Rodgers

Hi @Jorge BarajasRamirez, HTTPS is a requirement. Any attempt to access SKY API endpoints or OAuth under HTTP will result in a 404--those resources are not available.

You can read about our TLS version and cipher requirements in our Security documentation > TLS Requirements.