True, but as you said earlier, whether it is GET or POST does not matter they are equal in security.
-------------- Ian Skinner Web Programmer BloodSource www.BloodSource.org Sacramento, CA "C code. C code run. Run code run. Please!" - Cynthia Dunning ....-----Original Message----- ....From: Dave Watts [mailto:[EMAIL PROTECTED] ....Sent: Thursday, July 28, 2005 8:53 AM ....To: CF-Talk ....Subject: RE: Security of GET vs. POST via HTTPS? .... ....> Incorrect, they are both equally INSECURE. One could argue ....> that a post is slightly hidden by a thin veil. But it is not ....> hard to look behind that veil and get all the data. .... ....HTTPS is secure enough for most purposes. To effectively read the ....requests ....and responses at will, you have to be at either the client or the server. .... ....Dave Watts, CTO, Fig Leaf Software ....http://www.figleaf.com/ .... ....Fig Leaf Software provides the highest caliber vendor-authorized ....instruction at our training centers in Washington DC, Atlanta, ....Chicago, Baltimore, Northern Virginia, or on-site at your location. ....Visit http://training.figleaf.com/ for more information! .... .... .... ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Find out how CFTicket can increase your company's customer support efficiency by 100% http://www.houseoffusion.com/banners/view.cfm?bannerid=49 Message: http://www.houseoffusion.com/lists.cfm/link=i:4:213135 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

