Use HTTPS for API callsSolved
speaks for its self but sensitve information like IP addresses should be transfered over an encrypted connection.
This has been changed in the small patch of today.
Locked automatically