Link to home
Start Free TrialLog in
Avatar of gudii9
gudii9Flag for United States of America

asked on

POST Method Sensitive data

hi,

I was reading as below

No sensitive data in URL − Never use username, password or session token in URL , these values should be passed to Web Service via POST method.

how POST protect data?
i was not clear.

please advise
ASKER CERTIFIED SOLUTION
Avatar of Dave Baldwin
Dave Baldwin
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of gudii9

ASKER

these values should be passed to Web Service via POST method.
No. It is sufficient to place it in the request body. E.g. as headers. The verb is irrelevant.
if we put in body is it not visible in URL with GET

I thought it sends in URL unless it is POST

http verbs and rest verbs are same or any difference is there?
http verbs and rest verbs are same or any difference is there?
No, they are the same.  REST is done using HTTP connections.  The reasons for using POST is that the data is not visible in the address bar and much larger amounts of data can be sent than when using GET.  However, the most important 'protection' is to use HTTPS connections so they can not be read by other people.