APP and AAPP Endpoints

Enabling the APP and AAPP endpoints in Roller should be carefully considered. Communication with these requires an unencrypted user name and password to be passed over the network (for HTTP basic authentication).

The AAPP endpoint allows removal or modification of any weblog or user account on the server. The APP endpoint allows removal or modification of any weblog entry or resource for which the authenticating user has access. If unencrypted credentials are a concern, consider running SSL on the Roller APP and AAPP endpoints.