Your primary key shouldn't be in the URL

Open an order confirmation in a lot of apps and the URL ends in something like /orders/48213 . That number tells a stranger more than you'd think: roughly how many orders you've taken, how fast you're...