Linked Questions

4 votes
1 answer
12k views

Are GET parameters secure over https? [duplicate]

Since GET parameters are passed in the url, how can they be secure from someone with access to network logs. He would be able to see what urls are accessed, even if he cannot see the request and ...
SoWhat's user avatar
  • 169
0 votes
2 answers
250 views

GET Security over HTTPS [duplicate]

I am wondering if using the HTTP GET method over HTTPS to pass a username and password to a middle tier application would be safe. Essentially I am considering using a PHP include statement to ...
Dave's user avatar
  • 1
-4 votes
1 answer
280 views

HTTPS request break down [duplicate]

when I hit https://facebook.com/profile.php?id=101010101010 https://facebook.com/john.profile can my ISP know what I am doing on facebook from my requests? "/profile.php?id=101010101010" "/john....
raphael148's user avatar
0 votes
0 answers
88 views

Why aren't search engines encrypting search queries? [duplicate]

As you will know most search engines pass the search information url-encoded, i.e a get request with the parameters on it. But given all the fuzz about security and surveillance, why aren't SEs ...
Mah Neh's user avatar
  • 35
0 votes
0 answers
30 views

GET parameters over HTTPS [duplicate]

How are the GET parameters passed? example I Understand the HTTP Connection is started by browser as below 1) Connect with TCP port 80 2) after connection, pass the following over the connection ...
Mck's user avatar
  • 1
420 votes
14 answers
69k views

How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?

I've often heard it said that if you're logging in to a website - a bank, GMail, whatever - via HTTPS, that the information you transmit is safe from snooping by 3rd parties. I've always been a little ...
Joshua Carmody's user avatar
59 votes
6 answers
74k views

Should sensitive data ever be passed in the query string?

Should sensitive data ever be passed via the query string as opposed to the POST request? I realize that the query string will be encrypted, but are there other reasons to avoid passing data in the ...
C. Ross's user avatar
  • 1,458
8 votes
4 answers
6k views

Is conveying patient MRN in a web service URL a HIPAA PHI violation?

I'm building a web service to access patient data within our EMR and would like to subscribe to RESTful design principles. However, the idea of including the patient MRN in a GET request makes me ...
Daniel Wilson's user avatar
6 votes
3 answers
2k views

How much does a GET request over HTTPS reveal to an eavesdropper

Correct me if I am wrong, according to HTTP v1.1 a simple CONNECT request initiates a SSL tunnel between the server and a client. its only after the tunnel is created that the complete GET or POST ...
Denis's user avatar
  • 283
4 votes
1 answer
335 views

Mobile authentication with password as param in get request over ssl

I'm building out a new services layer for an existing mobile application. The mobile application authenticates with the existing services layer by providing the user name and password as url params in ...
AndrewSwerlick's user avatar
0 votes
1 answer
182 views

Is it okay that a payment app is sending my payment details via a GET request? [duplicate]

I was trying to use a state-owned mobile payment app to conduct some transaction on the internet and, thanks to an error message, I found out that my card number and the amount I'm paying were sent ...
ahmed's user avatar
  • 245