+212662161818 Du Lundi au Samedi / 8h à  21h

Are all URLs encrypted when using TLS/SSL (HTTPS) encryption?

Retour

Are all URLs encrypted when using TLS/SSL (HTTPS) encryption?

Yes, the SSL connection is between the TCP layer and the HTTP layer. The client and server first establish a secure encrypted TCP connection (via the SSL/TLS protocol) and then the client will send the HTTP request (GET, POST, DELETE...) over that encrypted TCP connection.

 

Since nobody provided a wire capture, here's one.
Server Name (the domain part of the URL) is presented in the ClientHello packet, in plain text.

The following shows a browser request to:
https://i.stack.imgur.com/path/?some=parameters&go=here

ClientHello SNI 

 

commander