RE: [PHP] Thank you, Microsoft! Now I need an alternate loginmethod
| From: | Matt Matijevich | Date: | Thu, 18 Mar 2004 21:17:37 +0000 |
| Subject: | RE: [PHP] Thank you, Microsoft! Now I need an alternate loginmethod | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-180916@lists.php.net to get a copy of this message | ||
<snip>
I'm about 90% sure that URL strings are passed in the clear to SSL
servers, so this would defeat the purpose of SSL.
</snip>
I don't think this is true. You can see the query string in the
address bar, but (with what little http knowledge I have) the http
conversation is encrypted, if you sniff it, the contents will be
encrypted, even the query string.