> "In that case, the form uses POST, since > > * the document to be validated might be confidential; any link to the > results of validating it would divulge its contents" This is a good example, but the issue is broader. For example, one security problem people had early on was with sites that used a GET-based form for logging in -- the user name and password would become part of the URL, and would appear in plain-text in the proxy logs. It's not the "result" that's private, it's the access information itself. LarryReceived on Monday, 20 May 2002 10:25:14 UTC
This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 22:55:51 UTC