Encrypting Parameters in URLs
I have a URL that looks like this: http://localhost:8001/jasperserver&reportUnit=somereport&username=cghan& password=somepasswrd As you can see, the password is in clear site, along with some other parameters. What's the best way to secure this? Set the method of the FORM (in HTML) to POST. That way attributes won't be shown in the URL (they can be retrieved exactly the same way). Anyway, for anyone with a sniffer, it will make little difference. If it is really important, force the server to use only HTTPS. gigadot Use SSL encryption, i.e. HTTPS. This makes it encrypted for everyone on the