It prevents the server form matching the url when it has stuff like the session id and username in it, and also helps in not giving those information to the outside.