Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
This question is more theoretical.
Is it save to be passing email address in query string like:
www.something.com/?email=person@domain.com
I am using this in one project, but i would like to know what are the downsides. Cause some big services are avoiding this, for example Gravatar wants you to convert email address into MD5 hash and then pass it in query.
Thanks for explanation
The main one is privacy.
Take Gravatar for instance. The traditional usecase is rendering an avatar for each comment. If you were to put the real email address in the query string, then you would be publishing the email addresses of everyone who commented (perfect for harvesting by spam bots or for harassing people who make comments that you disagree with).