<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: API changes: More security</title>
	<atom:link href="http://www.buxfer.com/blog/2008/04/03/important-api-change/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.buxfer.com/blog/2008/04/03/important-api-change/</link>
	<description>Easy online money management</description>
	<pubDate>Thu, 11 Mar 2010 10:34:18 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5.1</generator>
		<item>
		<title>By: Ashwin</title>
		<link>http://www.buxfer.com/blog/2008/04/03/important-api-change/#comment-4630</link>
		<dc:creator>Ashwin</dc:creator>
		<pubDate>Fri, 04 Apr 2008 16:34:08 +0000</pubDate>
		<guid isPermaLink="false">http://www.buxfer.com/blog/2008/04/03/important-api-change/#comment-4630</guid>
		<description>Scott: I checked and it seems like our API is operating correctly. Perhaps you did not url-escape special characters in your password? 

I have also fixed the http/https inconsistencies. Thanks a lot for pointing that out.</description>
		<content:encoded><![CDATA[<p>Scott: I checked and it seems like our API is operating correctly. Perhaps you did not url-escape special characters in your password? </p>
<p>I have also fixed the http/https inconsistencies. Thanks a lot for pointing that out.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: asp742</title>
		<link>http://www.buxfer.com/blog/2008/04/03/important-api-change/#comment-4616</link>
		<dc:creator>asp742</dc:creator>
		<pubDate>Fri, 04 Apr 2008 05:46:49 +0000</pubDate>
		<guid isPermaLink="false">http://www.buxfer.com/blog/2008/04/03/important-api-change/#comment-4616</guid>
		<description>Nice site! It looks like it will be very useful for me.

In the API documentation you sometimes write http:// instead of https:// which can be a security risk for those copying and pasting.

e.g.

&#62; Login using email address and password
&#62; http://www.buxfer.com/api/login.xml?userid=john@doe.com&#38;password=dohdoh

Also, I am having trouble logging in with the login command.  I have tried with an explicit @ and with the quoted %40.  Am I missing something?  I get 

&#62; ERROR: The userid / password combination is invalid

Even though I am sure they are correct.

Thanks,
Scott</description>
		<content:encoded><![CDATA[<p>Nice site! It looks like it will be very useful for me.</p>
<p>In the API documentation you sometimes write <a href="http://" rel="nofollow">http://</a> instead of <a href="https://" rel="nofollow">https://</a> which can be a security risk for those copying and pasting.</p>
<p>e.g.</p>
<p>&gt; Login using email address and password<br />
&gt; <a href="http://www.buxfer.com/api/login.xml?userid=john@doe.com&amp;password=dohdoh" rel="nofollow">http://www.buxfer.com/api/login.xml?userid=john@doe.com&amp;password=dohdoh</a></p>
<p>Also, I am having trouble logging in with the login command.  I have tried with an explicit @ and with the quoted %40.  Am I missing something?  I get </p>
<p>&gt; ERROR: The userid / password combination is invalid</p>
<p>Even though I am sure they are correct.</p>
<p>Thanks,<br />
Scott</p>
]]></content:encoded>
	</item>
</channel>
</rss>
