13 ms·
> that won't be hidden by https anyway The only thing that's not hidden are the domain names in the certificate that the server presents. The rest of the URL
by yoo1I 10y ago
> that won't be hidden by https anyway
The only thing that's not hidden are the domain names in the certificate that the server presents.
The rest of the URL is encrypted, along with all data and headers.
- nbraud 10y agoAssuming the server uses SNI, the domain name requested by the client is also sent in plaintext. Also, it's exposed anyway in DNS queries.