title: HTTPS - iPhone to API - Is URL secure?
body: <p>I understood that when securing your site through HTTPS, the URL including the query string is encrypted and only sent once connection is made to the host so this url isnt available to eaves droppers.</p>
  
  <p>However, someone has told us that this is not the case, at least in the case of iPhone to .Net (MVC) API connection and he recommended adding this sensitive information to the HTTP header.</p>
  
  <p>So, can we rely on the query string being encrypted or is it best to change how we're working and add it to the header as suggested?</p>