Stack Exchange network consists of 183 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
I think an https endpoint would be a good compromise since it would bypass any firewall in between. If nothing else it would be nice to have at least one call exposed via https so this type of thing could be verified.
