3 ms·
I get that. But, what's more worrying is that my password came through in the URL string (a GET request)
by andyhmltn 13y ago
I get that. But, what's more worrying is that my password came through in the URL string (a GET request)
- pauldix 13y agoWe're no longer putting the password in the URL, but play and sandbox aren't over HTTPS. And the password still gets sent. As their name implies, they're for playing around, not for real data. On a real installation you'll want to use SSL. We'll have that built into the prod releases or you can always have your load balancer/proxy handle that for you.
- andyhmltn 13y agoThat's awesome then. Great product :)