Using a cleartext http:// URL transmits data without encryption and exposes it to interception.
Use HTTPS endpoints and enforce TLS for all network requests.