
First, use https (SSL/TLS)
Second, you can have replay attacks link


I think you need to use a more robust authentication and authorization method.
Because is your own API you don't need oauth.

Try one of this options, all depend of the security level that you need.


HTTP Basic + TLS (with keys instead of passwords)
Application-only-auth link
Amazon Signature Version 4 link


Key-agreement protocol in a REST API
I can't seem to find information online about trains, buses, to take to get there etc. I would be travelling in from Stainach in Austria.

Is there a mountain station or similar that I can view it from?

e: I see from VMA's comment that I can go there via Grindelwald. What is the best way to get there from Stainach?

I'm thinking the train in the way of Stainach - Salzburg - Zurich - Bern - Grindelwald, but I can't get fares online for the Salzburg-Zurich-Bern portion. Anyone have an idea of the rough estimate of the fare?
