Transport Layer Security (TLS)

Motivation

We have established that APIs are significant for businesses and their smooth functioning. However, to ensure their successful operation, we need a layer of security to protect data in various communication channels. The transmission of requests and subsequent responses between a client and server must be secured. Otherwise, attackers can intercept these transmissions, which can subsequently lead to information disclosure and tampering.

Assume the following simplistic view of a client-server communication that is being performed using unsecured public Wi-Fi. Without the application of any relevant security protocols, the messages we send and the API requests and responses generated are left vulnerable to any attacker over the network.