Comparison between POST and GET (httpwebrequest in C#) - in terms of "visibility"
<p>I would like to implement an online activation feature (something like activating using a cd key), and I would like to do so via http.</p>

<p>I would like to send the key together with an internal password to the server each time an activation request is sent.</p>

<p>The password's use is that, since the http service is exposed publicly, I would like it to be used only by my application, not any unknown third party (like brute-force trying different keys).</p>

<p>As I know that in a web browser, end users can see the GET form values in the address bar, but for POST method it won't have this issue.</p>

<p>What I want to ask is:</p>

<blockquote>
  <p>Since, obviously, I don't want this
  internal password to be known to
  others, when submitting the cd key and
  the password via the C# class
  httpwebrequest, is there any
  difference between using the GET and
  POST method, in terms of "visibility"?</p>
</blockquote>

<p>It makes sense that I should use POST in the rationale that the form values are visible in the web browser address when using GET, but since now I'm using httpwebrequest, there is no web browser "address bar" to be seen, so is it actually no difference at all? </p>

<p>Or, is it that there is when there is like a hacker that intercepts the web request of my application?</p>

<p>Thanks a lot for your help!</p>
