Rub shoulders with leading experts and industry disruptors at TNW Conference →

The heart of tech

This article was published on February 5, 2014


Yahoo is extending its HTTPS encryption to cover Yahoo Contacts and Profile APIs

Yahoo is extending its HTTPS encryption to cover Yahoo Contacts and Profile APIs
Kaylene Hong
Story by

Kaylene Hong

Kaylene Hong was Asia Reporter for The Next Web between 2013 and 2014, based in Singapore. She is bilingual in English and Mandarin. Stay in Kaylene Hong was Asia Reporter for The Next Web between 2013 and 2014, based in Singapore. She is bilingual in English and Mandarin. Stay in touch via Twitter or Google+.

YahooLast month, Yahoo enabled default HTTPS for all users of its Yahoo Mail service — and now, to support the move, the company announced that it has also enabled HTTPS access to Yahoo Contacts and Profile APIs.

All developers using the Yahoo Contacts and Profile APIs will need to switch their access protocol to HTTPS by February 27 this year, though the domain name social.yahooapis.com will remain the same.

As of February 28, Yahoo will limit all access to its Yahoo Contacts and Profile APIs to secure SSL connections only — which means no user data will be accessible via HTTP. If developers don’t update their API settings, users won’t be able to access Yahoo Contacts / Profile data via their service.

Yahoo Mail was the subject of criticism after a sustained outage that led Meyer to apologize for the “unacceptable” situation. The HTTPS switch-on came exactly one year after Yahoo first rolled out an SSL encryption feature for Mail.

Image via Graham Hills/Flickr