All Dropbox API calls must be made over SSL/TLS, so your app needs to be able to make SSL/TLS connections, but it doesn't need its own certificate. The Dropbox API servers themselves are served with their respective certificates, which your client just needs to trust.
