AJAX security: POST or GET?

Question

As the title may possibly suggest, I'm wondering what's more secure for AJAX requests: POST or GET. I can't work out which is better because they're both hidden from the user due to the URI being sent via. AJAX, not in the URL bar.

Thanks,

James

Answer 1

Neither add any security against either man-in-the-middle attacks or the end user. Both can be intercepted and tampered with using Wireshark, Firebug, or other tools.

If you want security against interception, you can use HTTPS. That does not prevent the user from sending requests manually, though.