Why not sending token through headers?

[muhammadfarizarya]

Im corious about sending session_id through cookies, why not use headers for sending token to odoo instead? thank you very much

[ealmeida1225]

Officially says that's for security reasons, but I'm sending the token and it works fine. But maybe my code is more vulnerable of course.