The whole point of HTTPS is to encrypt all traffic, including the request line. Do when you do a request like: GET /customer/orders/?id=2348&order_id=3456 HT

The whole point of HTTPS is to encrypt all traffic, including the request line. Do when you do a request like: GET /customer/orders/?id=2348&order_id=3456 HTTP/1.1 Host: example.com over HTTPS, the first line also gets encrypted. So no point in banning GET.