Encryption
Tradecloud API uses encryption to secure your connection to the API on two levels:
Transport Layer Security
Section titled “Transport Layer Security”The Tradecloud API only supports Hypertext Transfer Protocol Secure (HTTPS) and does not support plain HTTP.
The Tradecloud API only supports the Transport Layer Security (TLS) v1.2 and TLS v1.3 protocols and does not support SSL 2 or 3, TLS v1 or v1.1 protocols.
Check the quality of the Tradecloud certificate using SSL Labs.
Signed tokens
Section titled “Signed tokens”The Tradecloud API uses signed JSON Web Tokens: Tradecloud rejects a token whose content has been changed.
A signature does not protect a token that is stolen. An access token is a bearer credential: whoever holds it can use it until it expires. Send it only over HTTPS, keep it out of logs and URLs, and store it as securely as a password.