I once came across a site with that was base 64 encoding GET params for an incredibly insecure http route. E.g., the request was something like http://example.

I once came across a site with that was base 64 encoding GET params for an incredibly insecure http route. E.g., the request was something like http://example.com/bad/?v=YT0xMjMmYj00NTY= http://example.com/bad/?v=YT0xMjMmYj00NTY= which they would then decode on the server to a=123&b=456