With a request body you can also rely on all the other standard semantics that request bodies afford, such as different content-types, content encoding. Query p

With a request body you can also rely on all the other standard semantics that request bodies afford, such as different content-types, content encoding. Query parameters are also often considered less secure for things like PII and (less important these days) query parameters don't really define character encoding. But generally the most important reason is that you can take advantage of the full range of mimetypes, and yes practicality speaking there's a limit on how much you should stuff in a query parameter. This has resulted in tons of protocols using POST, such as GraphQL. This is a nice middle ground.