2,448 karma · joined September 3, 2011
http://www.thebuzzmedia.com/designing-a-secure-rest-api-with... Complete, easy to understand article that outlines the HMAC approach but suggests that things can be much simpler if HTTPS is employed.
http://broadcast.oreilly.com/2009/12/principles-for-standard... Claims that you should use HTTPS and sign your queries using a private key. This seems onerous for the API user.
I'll definitely try to add an "about us" page with a few details. Thanks for your thoughts!
Right now I'm only delivering in the US.
I'll take a look at the submit/logout issue. Thanks again.
WRT price. I just can't afford to offer the first card free. I've received nearly 200 cards in the first hour. Once I get going though, I'll definitely consider promotions like this.