XML RPC always seemed grand and dandy with me, but the first function I'm implementing is login(), and gay, how do I preserve state across requests? Cookies work I'm sure, but it's not something the inbuilt python xml rpc server or client were thinking about. (there is a script, though) Just wondering, would this part be simpler using SOAP? Security is a big-ass consideration for my application btw. Google led me to the facebook xml rpc API but I can't understand how they provide much security taking a quick look at it, anyhows, security wouldn't be so critical there. Should I look at SOAP, or is it REALLY REALLY a monumental waste of effort?