We develop a desktop application and it makes requests to our own API endpoints. Right now all the requests that the desktop application makes to our API are HTTP. I now want all those requests from within the application to be encrypted. Is it enough to simply do an .htaccess HTTP to HTTPS redirect to achieve that? Or do I need to go into the app and make sure that each request starts out as HTTPS?