web services over HTTPS

[crotwell]

Current FDSN web service commonalities spec says (page 3):

All services should be available on TCP/IP port 80.

but this spec says JWT must use HTTPS. If accepted, this section of the commonalities specification should be updated to allow HTTPS in addition to or in place of HTTP.

See FDSN/WebServiceSpecificationCommonalities#3

[jschaeff]

We should rollout this modification in the commonalities. Something like this:

All services must be available on the TCP/IP port 80. It is recommended to also support HTTPS over port 443

[rcasey-earthscope]

This is for the general web service spec, then yes, I agree.

As we move to employ JWT, naturally we will have to qualify that HTTPS is required.

[javiquinte]

I agree of course. Most probably Chad will work on this approval during the WG3 at the IASPEI Meeting in Lisbon.