Effective May 1, 2017, all API calls should be issued at HTTPS endpoints.
After then, HTTP API calls will be redirected to HTTPS with a 301 Moved Permanently redirection. Note that this may break your App if you still use HTTP. Please migrate to HTTPS as soon as possible.