cryptographically strong, this will be prohibitively difficult.
This technique requires Javascript, so it may not work for browsers that have Javascript
disabled. [R.352.4]
Do not use the GET method for any request that triggers a state change.