WebApp Sec mailing list archives

RE: IIS log - GETs vs. POSTs


From: "Calderon, Juan C (EM, DDEMESIS)" <Juan.Calderon () ge com>
Date: Mon, 1 Sep 2003 10:23:11 -0400

As far as I know.

Other implication of sending information trough HTTP GET is that SSL do
not encrypt (protect) it, only the bytes flow (POST data) as encrypted.
so sending information though URL using SSL is useless.

Correct me if i'm wrong.

cheers :)

Attachment: smime.p7s
Description:


Current thread: