开发者

Using JSONP over SSL

If I want to send information to a server using SSL, presumably that's sensitive info开发者_JS百科rmation. If I use JSONP to send it to a different domain, that sensitive information must go in the querystring. At a minimum, it seems that this information would be logged by the web server, thus exposing sensitive information. Does using JSONP over SSL make any sense?


For returning data, sure it can make sense, for requesting data though...yes you're going to expose data in the query string that can be logged at several places along the way.

Using SSL to POST the data through your own domain(and you proxying to the other) seems like a better option, if it's possible, so you're not providing data using GET at any point.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜