Unless you need your game to communicate in real time, I say go the web API route.
-
No need to design intricacies of the API's data transport, just pass your data over HTTP.
-
Stick it behind nginx or Apache and get TLS for free, any client HTTP lib will just handle the https.
-
It works everywhere, so if you want a browser version, you can do that, too.