when looking at the TracktionMarketplaceStatus class I saw that the username, password, … is simply added as a parameter to the URL in readReplyFromWebserver(). Then calling url.readEntireTextStream() seems to create a GET request to transmit the data to the server. But isn’t this a security risk because GET parameters may appear in the web server access logs? Or should the password be hashed before transmission? Or did I miss something?