Firstly I should say thanks for having a separate forum for Content Delivery API.
We are using Content Delivery API and our client security team asked us about the security protocol being used in the API (what kind of encryption does EpiServer use, is it TLS 1.0 / TLS1.2 etc)