Everyone asking this should MitM their own browser and take a look into the requests. Eye-opening and pretty straightforward with e.g. mitmproxy. Strip TLS wit

Everyone asking this should MitM their own browser and take a look into the requests. Eye-opening and pretty straightforward with e.g. mitmproxy. Strip TLS with a temporarily trusted self-signed cert to get the whole picture.