• All the attributes and values are visible to the end user. Therefore, they are not secure



  • There is a limit to URL length of 255 characters.