[thlau]

So I am honest I didn't looked at the eye candy in this patch, I only peeked at the out of game way to access a characters emails and notes, and I like to know why this feature can be accessed simply by the full character api key?

Is it really necessary that a person I trusted with an full api key now can look at my contacts and write emails in my name? If someone harasses another player using this way what will you do? Do you threaten to ban him, while essentially everyone in the world could have used that access? The player whos account is compromised could just claim he gave the key to some 'trusted' third parties, that provided nifty tools that uses the key.

So this feature is another reason NOT to use the api keys. So I still wonder what the goal is the Winchgate devs are heading to. Do they want the api to be used or not? If someone wants to use the api, at the moment he only can do that with a bad feeling if he wants to use/honor third party applications/service.

Please understand that I think that accessing ingame mails from out of the game is a cool feature, but not if the access to it is uncontrollable!