The path part of the URL is encrypted along with the rest of the request. Only t... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

Cushman on Oct 9, 2012 | parent | context | favorite | on: Stripe Button (beta)

The path part of the URL is encrypted along with the rest of the request. Only the DNS lookup (i.e., the hostname) is in the clear.

mjschultz on Oct 9, 2012 | [–]

Wouldn't stripe's server logs also have the get params in cleartext?

cmaggard on Oct 9, 2012 | | [–]

They're most likely being scrubbed out, same as you would with passwords.

pfraze on Oct 9, 2012 | [–]

Okay, thanks for clearing that up for me.

Cushman on Oct 9, 2012 | [–]

Not at all, sorry for piling on :) I swear there were no other replies when I commented.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact