I have a REST API running in a Tomcat container that has an endpoint that takes a customer email address as a query parameter. It's something like this:
Customer email addresses are an asset we want to protect, so we need to ensure they aren't logged any where, and cannot be intercepted. The API only works over HTTPS and requires strong authentication.
When it comes to logging, in the application code, email addresses are not logged. However, all URLs the service get logged out in the Tomcat localhost_access_log, which include the query parameters. A plan is to use a different Tomcat access log valve that didn't log out query parameters in URLs. Would that be sufficient to ensure the email addresses don't get logged out. Is there anywhere else that typically logs out URLs that needs to be taken care of?