[teddyh]

No mention of authentication or encryption? I can’t believe that everyone is either using HTTPS with either client certificates or plain HTTP authentication, or using IPsec (or some form of IP tunneling) to make encryption transparent to the application.

[pjc50]

Don't know why this was downvoted - it's one of those things that's a huge pain to retrofit.

[tenebrisalietum]

That's a Layer 5 or 6 issue, or lower if you want to talk about IPSec, not a Layer 7 issue.