Can a username and password be sent safely over HTTPS via URL parameters?

后端 未结 6 1307
隐瞒了意图╮
隐瞒了意图╮ 2020-12-02 21:58

A colleague and I had a heated debate yesterday whether it is safe to send login credentials via URL parameters as a means of authentication. He correctly pointed out that

6条回答
  •  孤街浪徒
    2020-12-02 23:02

    The requested URL might show up in Web server logs and browser history/bookmarks which is not a good thing.

提交回复
热议问题