Does Jira include auhtenitcaiton and TLS when making API calls to JIRA?

[Mont]

Hello,

I'm currently preparing for an Security Assessment for my service.

My service calls JIRA and I am wondering when performing API requests to JIRA if it shall automatically send this encrypted over?

I wrote my service in python.

Are there additional best practices that should be implemented regardinf security when making API calls to JIRA?

Additional documentation - https://buildmedia.readthedocs.org/media/pdf/jira/latest/jira.pdf

[Neil]

Hello there. If you're making calls to a Jira Cloud instance, all API calls must be made using https. You can run your instance URL into a TLS checker, and you'll find that it's running on the latest TLS version (1.3 as of this post).  More information can be found here: https://support.atlassian.com/security-and-access-policies/docs/supported-security-protocols-for-atlassian-cloud-products/