title: URL Querystring security question (ASP.NET)
body: <p>If a user clicks on a button that does a post (lets say it has UserName and Password in the post) and those credentials get authenticated successfully.  If I did a redirect to a completely different application (so I can't carry session, etc) and I use a GET with the Username and Password in the querystring (I could even use basic encryption if that helps but regardless) and then when it gets to the page, I check to make sure it came from the page I expected it to come from, pull the values from the querystring, put them in a session variable and then do a redirect back to the same page (removing the querystring values so they can't be viewed by user).  This all happens over SSL on the same server.</p>
  
  <p>Can someone point out the security holes of someone intercepting the UserName and Password in this scenario?</p>