Is SSL secure enough for using sensitive data (like password) in query string?
Is there any extra options to implement?
How secure is sending sensitive data over https
query-stringsecurityssl
Related Question
- Php – Secure hash and salt for PHP passwords
- Are HTTPS URLs encrypted
- How should I ethically approach user password storage for later plaintext retrieval
- Git – SSL certificate rejected trying to access GitHub over HTTPS behind firewall
- How to bcrypt have built-in salts
- Node.js – How to get GET (query string) variables in Express.js on Node.js
Best Solution
SSL provides secure, transport-level security. Nobody between client and server should be able to read the information.
But you should change your mind about writing sensitive data in the querystring. It will show up in the browser's history and is visible in the address bar of the browser and in logs on the server. See this article: How Secure Are Query Strings Over HTTPS?
If using query strings is your only option (I doubt it), here is an interesting article about securing query strings.