Note that HTTPS with HTTP Basic authentication is the preferred means of securing the API (@justinvdm).