5.1 Security Considerations for Implementers

Communications to the authentication server and configuration server should use HTTP over TLS, as specified in [RFC2818].