Alex Rivera | Logout

What is the difference between GET and POST encryption?

Asked 2010-06-17T16:21:08.180
36

What is the difference when encrypting GET and POST data?

To be more specific: when https-SSL encrypts both of this methods, what is the difference in the way the browser does this; Which parts are encrypted and which are not?

I read somewhere that the destination url is not encrypted in POST, is that true? If it is true and same in GET, where are all the parameters?

When both methods are encrypted with same data, do they look the same when sniffed? What parts are encrypted and which are not?

post https get
Edit
Report

2 Answers

3

When an HTTPS GET request is made, the query string parameters ARE ENCRYPTED! The only thing that is not encrypted in an HTTPS request is the server name or IP address and port of the request. Those are the only two pieces of information necessary to route the request from your browser to the web server, which then performs the decryption.

Use Fiddler (with the SSL decryption turned off) and look at your traffic with a secure site. You'll see that you cannot view unencrypted query string data or even path information.

answered 2010-06-17T17:02:58.030
0

POST can send more data than GET

GET is easier for a malicious user to manipulate data

GET is not encrypted

POST is not encrypted

answered 2010-06-17T16:23:20.697

Your Answer