The data contained in the URL query on an HTTPS connection is encrypted. I find the a good explaination given by 'sycophant-ga' here
Further, there is a slight difference in kind of request it is... GET or POST. This
] blog article explains on it, have a look.
So a POST with HTTPS should be a good option.