Restricting api.twitter.com to SSL/TLS traffic

[thezerobit]

According to this https://dev.twitter.com/discussions/24239 all non-HTTPS API calls will start failing on January 14th.

EpiTwitter.php has this line:

protected $apiUrl         = 'http://api.twitter.com';

I don't know why this particular URL is not using SSL like the rest, but it should probably be changed and tested.

[thezerobit]

Curl is probably going to want a to certify the endpoint with a CA certificate. I don't know much about PHP/Curl's CA store--if it even has one.

[envelopewindow]

I used recent ca file from http://curl.haxx.se/docs/caextract.html