: HTTP and HTTPS visibility question First a little context as a lot of people have been confused by my question in the past. Everything in the 2 requests below is visible to a third party
First a little context as a lot of people have been confused by my question in the past.
Everything in the 2 requests below is visible to a third party (man in the middle attack), url, data, host name, both ip addressed, etc.
POST
foo.com/
POST Data {
foo: me,
bar: you
}
GET
foo.com?foo=me&bar=you
I belive only host name and both ip addresses are visable to the third party with the POST request below.
foo.com POST Data {
foo: me,
bar: you
}
My question, is the same viable or is the GET data also visible compared to the POST request over https with this one?
foo.com?foo=me&bar=you
More posts by @Michele947
1 Comments
Sorted by latest first Latest Oldest Best
First, this kind of question is better asked at security.se. It was asked there several times and has extensive answers. See for example security.stackexchange.com/questions/12531/ssl-with-get-and-post.
In short: HTTPS is just HTTP inside a TLS tunnel. This means that both HTTP request and HTTP response are protected by TLS and thus the parameter are encrypted for GET and for POST requests. But there are several reasons why you should use POST anyway, like data from GET leaking into HTTP referer, log files etc.
Terms of Use Create Support ticket Your support tickets Stock Market News! © vmapp.org2024 All Rights reserved.