Yes, it is. But using GET for sensitive data is a bad idea for several reasons:

• Mostly HTTP referrer leakage (an external image in the target page might leak the password[1])
• Password will be stored in server logs (which is obviously bad)
• History caches in browsers

Therefore, even though Querystring…