Sunday 18 August 2013

Is it ok to send login details over GET request using SSL

Is it ok to send login details over GET request using SSL

I'm restricted to using JSONP for API requests from a javascript app.
The entire javascript app will be hosted over SSL.
As we are limited to GET requests when using JSONP is it ok to send login
credentials (username/password) to the API using a GET request?
I presume it wouldn't be if we weren't using SSL but it is ok because we
are. Correct?
Thanks!

No comments:

Post a Comment