title: Handling transfer of iv (initialization vectors)
body: <p>I have a site A and site B where site A needs to send sensitive encrypted data to site B for site B to decrypt.  I know that its best to encrypt using a randomized cryptographic initialization vector (iv) which is unique to each secret string, but my question is: </p>
  
  <p>Given the transfer is made using https, is it safe to send the iv along with the cipher text?  Are there best practices to follow for transfer of the iv?  </p>
  
  <p>My understanding is that the iv is part of the beginning of the cipher text so I'm inclined to believe there's no real security threat in having the iv in plain sight.  </p>
  
  <p>Thanks!</p>