## How it works

HTTP-client diagnostics should explain a failure without exposing credentials, card information or complete customer payloads.

## Implementation

Configure request timeouts and TLS verification explicitly. If a proxy is required, use your organization's approved HTTPS setup and keep proxy credentials in protected environment configuration. Log method, resource ID, response status and a redacted message. Never disable certificate validation as a payment-integration workaround.

## In this area

- Logging
- Proxies