I was wondering if there are any security risks of having too long URLs for an internet site.
Of course there are things that don't matter if they're long or not, i.e. the actual hostname and filename, but I'm not so sure about queries and fragments in the URL. I actually once encountered a URL with over 900 characters.
Is there a rule of thumb saying that you should try to keep URLs as short as possible for security reasons or is it completely depending on the information that's transmitted in the URL?