Merge pull request #381 from stellar/https-sep6

Add HTTPS requirement to sep6
stellar · Aug 27, 2019 · 97fe3d6 · 97fe3d6
2 parents 56eb58e + 6648300
commit 97fe3d6
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/ecosystem/sep-0006.md b/ecosystem/sep-0006.md
@@ -67,6 +67,10 @@ Valid CORS headers are necessary to allow web clients from other sites to use th
 Access-Control-Allow-Origin: *
 ```
 
+## HTTPS Only
+
+This protocol involves the transfer of value, and so HTTPS is required for all endpoints for security.  Wallets and anchors should refuse to interact with any insecure HTTP endpoints.
+
 ## Recommendations
 
 SEP-6 lays out many options for how deposit and withdrawal can work. These are recommendations for getting a wallet or anchor implementation working with minimal effort while providing a great user experience.