Why is POST not inherently more secure than GET?
- A Both are plaintext without HTTPS
- B POST data is always encrypted
- C GET is encrypted by default
- D POST bypasses the network
Answer
Both are plaintext without HTTPS
The reason to avoid credentials in GET is that URLs appear in browser history, server logs and referrer headers, not encryption.





