logoalt Hacker News

gl-prodtoday at 9:19 AM1 replyview on HN

The difference is the method. Query you're saying I can use body. GET you should never use body.


Replies

locknitpickertoday at 11:38 AM

> The difference is the method. Query you're saying I can use body. GET you should never use body.

The biggest win is how intermediary boxes now have concrete guidance that a specific HTTP request is both safe, idempotent, and carries a request body. Up until now none of this existed, and at best developers could use unsafe methods to carry request bodies (see GraphQL and how it uses POST for queries)