A few years ago I stepped into the front seat of a taxi in Madrid and put on my seat belt only to realise my defensive action had insulted the driver. It wasn't his driving ability I was worried about so much, just every other nutter on the Spanish highway. Anyway, I just had a similar feeling whilst browsing the Vonage Developer's Center [sic]. So far they have a single service 'Third Party Call Control'. Whilst they provide a nice simple URI to HTTP GET the address book, (it's a shame they put the password as a parameter), this is the bit that bothers me:
The W3C recommends
using HTTP POST instead of GET for URLs like these,
however both are supported.
So they know they're not safe and they're breaking Web Architecture but just don't seem to want you to buckle-up.