> Some bloggers INCORRECTLY thought that HTTPS didn't secure the URL Flags. Correct fact: parameters passed in the URL like ?item=bla is encrypted
It’s still good practice to keep sensitive info out of URL query parameters, which often leak into server logs.
