News for hackers. Stuff that matters.

A comment on The History of the URL: Path, Fragment, Query, and Auth. Parent comment

Re:The History of the URL: Path, Fragment, Query, and Auth by csbowe on Monday July 18, 2016 @05:40PM (#12118208)
It's base64 encoded and put into the header, according to the article.
[ Parent | on HN ]
Re:The History of the URL: Path, Fragment, Query, and Auth by colejohnson66 on Monday July 18, 2016 @06:39PM (#12118433)
But if you use HTTPS, those headers are encrypted, right?
[ Parent | on HN ]
Re:The History of the URL: Path, Fragment, Query, and Auth by kevin_thibedeau on Monday July 18, 2016 @06:46PM (#12118463)
The problem is they can end up in the logs of the receiving server and if that gets hacked...
[ Parent | on HN ]