Can specify SSL key and certificate in Restapi configuration. If it's done, request API only through https.