Well, there is also something as "state". You don't want "method=delete" to work... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

pors on Feb 3, 2012 | parent | context | favorite | on: General principles for good URI design for RESTful...

Well, there is also something as "state". You don't want "method=delete" to work as POST either, unless the client is authorized. Same with GET. I don't see why POST would be better than GET really.

icebraining on Feb 3, 2012 [–]

Theoretical reason: because that's what the HTTP spec says.

Practical reason: because browsers have prefetching systems that might GET resources without asking the user, which might be authorized anyway.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact