had a quick look into it. it looks like arenanet is actually allowing us to query a web auction house using a simple session cookie - which is pretty lol.
Code:
url = new URL("https://tradingpost-live.ncplatform.net/ws/search.json?ids="+itemId);
con.setRequestProperty("Accept-Language","de-de,de;q=0.8,en-us;q=0.5,en;q=0.3"); //chosen lang will be string response lang
con.setRequestProperty("Cookie","s="loginCookieFromWebsite");
halking about buy/sell stuff: did you yet capture any stuff that leads to assuming buy/sell/retrieve is also a session static http 1.1 post?
edit:
buy stuff:
Code:
https://tradingpost-live.ncplatform.net/ws/item/19697/buy
-> {"results":{"items":1,"price":20,"fee":2}}
no traffic was captured for selling stuff(besides the ui status updates). so i believe selling is not issued via the http 1.1 server.