What are the different security considerations for while writing API
I was thinking what are the different points to consider while designing the scalable APIs? I could think a few like Avoid self signed certificates. Avoid hosting APIs without authentication and authorisation.