Post

Passing secrets in URLs are bad. (SAS tokens I am looking at you). URLs get logged everywhere, even with HTTPS.