Is an HTTPS query string secure?

前端 未结 9 1366
耶瑟儿~
耶瑟儿~ 2020-11-22 03:52

I am creating a secure web based API that uses HTTPS; however, if I allow the users to configure it (include sending password) using a query string will this also be secure

9条回答
  •  花落未央
    2020-11-22 04:32

    Yes. The entire text of an HTTPS session is secured by SSL. That includes the query and the headers. In that respect, a POST and a GET would be exactly the same.

    As to the security of your method, there's no real way to say without proper inspection.

提交回复
热议问题