title: XSRF protection GET .net mvc
body: <p>I have a site which will show sensitive information.  I am using Anti Forgery Tokens etc to protect against XSRF in POSTS.  However I am worried about someone being able to view sensitive info from a GET.  What is the recommended practice for protecting read only data sent via a GET in .Net MVC 2?</p>