OneData recommends enabling SSL, but it is not mandatory. The services use the BASIC authentication scheme, which accepts a OneData username and a encrypted user password for authentication.