It doesn't matter if you use GET or POST. If you don't sign requests, you don't know where they are coming from. In the API we've implemented recently in our c

It doesn't matter if you use GET or POST. If you don't sign requests, you don't know where they are coming from. In the API we've implemented recently in our company (e-commerce search-as-a-service) we use request signing exactly according to Amazon's AWS specs.