SyntaxFix

[security] Are querystring parameters secure in HTTPS (HTTP + SSL)?

Yes. The querystring is also encrypted with SSL. Nevertheless, as this article shows, it isn't a good idea to put sensitive information in the URL. For example:

URLs are stored in web server logs - typically the whole URL of each request is stored in a server log. This means that any sensitive data in the URL (e.g. a password) is being saved in clear text on the server

Examples related to security

• Monitoring the Full Disclosure mailinglist • Two Page Login with Spring Security 3.2.x • How to prevent a browser from storing passwords • JWT authentication for ASP.NET Web API • How to use a client certificate to authenticate and authorize in a Web API • Disable-web-security in Chrome 48+ • When you use 'badidea' or 'thisisunsafe' to bypass a Chrome certificate/HSTS error, does it only apply for the current site? • How does Content Security Policy (CSP) work? • How to prevent Screen Capture in Android • Default SecurityProtocol in .NET 4.5

Examples related to https

• What's the net::ERR_HTTP2_PROTOCOL_ERROR about? • Requests (Caused by SSLError("Can't connect to HTTPS URL because the SSL module is not available.") Error in PyCharm requesting website • Android 8: Cleartext HTTP traffic not permitted • ssl.SSLError: tlsv1 alert protocol version • Invalid self signed SSL cert - "Subject Alternative Name Missing" • How do I make a https post in Node Js without any third party module? • Page loaded over HTTPS but requested an insecure XMLHttpRequest endpoint • How to force Laravel Project to use HTTPS for all routes? • Could not create SSL/TLS secure channel, despite setting ServerCertificateValidationCallback • Use .htaccess to redirect HTTP to HTTPs

Examples related to http-get

• How do I print the content of httprequest request? • PHP cURL GET request and request's body • How to pass complex object to ASP.NET WebApi GET from jQuery ajax call? • Cache an HTTP 'Get' service response in AngularJS? • How to use HTTP GET in PowerShell? • How can I pass POST parameters in a URL? • Writing image to local server • OS X: equivalent of Linux's wget • How to add parameters to a HTTP GET request in Android? • Are querystring parameters secure in HTTPS (HTTP + SSL)?