title: Security: Sending email address in a url parameter
body: <p>Is it considered bad security practice to include somebody's email address in a url as a parameter over http? The email address belongs to a client, and they may not want anybody to see it. The url points to my own domain, I'm just creating unique urls with email addresses as a parameter so I can detect who visited the url. Can anybody sniff http traffic to extract that info?</p>