Say I have an endpoint to create a username:
Where username =
foo and the api token is
1234 is encoded in the URL, it is public? My research says TLS encryption only encypts the body because the DNS servers need to know where to route the request.
QUESTION: Does this mean it is not secure to post data to a REST API endpoint?
Disclaimer, I guess one could encrypt the data first before putting it in the URL, e.g.:
- Encrypt the name foo ->
- Encrypt the token ->
And then request
https://example.com/api/set_username/FF8811A/AABBCCDDEEFF1122/, and then the server decrypts the parameters.