The mysterious h Parameter

We are trying to have our customers manage their email preferences in one place. It happens that this one place is a DNN site. We want to recreate the communication preferences link and frame that in the DNN site. That way no matter how they get to the page (email or the customer facing site) the preferences are the same. Less confusing that way.

So, to that end I made a suitelet that takes in a couple of custom parameters. One for the email and one for the customers internal id, both of which we have in the DNN site. Now, through trial and error we have come to the conclusion that the 'h' paramenter in the communications preference link is encrypted. We assumed it was the email for the user. Unless I am doing something wrong it is not the email. I get a very different string with nlapiEncrypt than I seeing in the URL. Here is my code: