Requiring HTTPS on the Tumblr API
The time has come folks! We’re officially dropping support for insecure (http://) requests to the Tumblr API after October 31st, 2021. Instead, please use https:// for all requests. The following day we’ll start failing all insecure requests and invalidating any credentials sent in plain text. You can expect the API to respond with a 403 Forbidden status and a 5006 subcode in this scenario.
Yes, this means you can still get freaky for one last Halloween, but please make sure you add the s to https before you head out for your annual trick-or-treating adventure!