> Here's the URL to the thing: https://example.com/a/url?secret=hunter2 https://example.com/a/url?secret=hunter2 This is indexable by search engines. > Here's

> Here's the URL to the thing: https://example.com/a/url?secret=hunter2 https://example.com/a/url?secret=hunter2 This is indexable by search engines. > Here's the URL to the thing: https://example.com/a/url https://example.com/a/url and the password is "hunter2". This is indexable by search engines. Yes, the latter is marginally harder, but you're still leaning on security through obscurity, here. The number of times I have had "we need to securely transmit this data!" end with exactly or something equivalent to emailing an encrypted ZIP with the password in the body of the email (or sometimes, some other insecure channel…) …