If you are using TLS encryption, sensitive data can be transmitted via
URL arguments
hidden variables
server side repository
Cookie