The data contained in the URL query on an HTTPS connection is encrypted. I find the a good explaination given by 'sycophant-ga'
here[
^].
Further, there is a slight difference in kind of request it is... GET or POST.
This[
^] blog article explains on it, have a look.
So a POST with HTTPS should be a good option.