title: Sending Personal Information in GET String
body: <p>My issue:  I know someone who wants to send personal information (email address, first and last name) by way of a query string to an end url.  POST requests are not possible.</p>
  
  <p>Is this a valid way to do this in this age of enhanced cybersecurity?  I'm guessing "no", is this flat out wrong and / or frowned upon?  Is this illegal?  I'm trying to feed my friend valid reasons about why this is not appropriate.</p>