Why Encrypting URL Parameters Is a Bad Idea (and What to Do Instead) | Hacker News Reader