I drafted this in 2014 and given the recent
QC news: I was quite shocked to see that the Embarcadero
QC client logs in over HTTP, not over HTTPS, especially since it passes the password in plain text.
QC does this logon call to
http://qc.embarcadero.com/coBugCGI.e...blicInterface: ...
More...