Hacker News new | ask | show | jobs
by hexadec0079 3371 days ago
HTTPS will not protect the URL of the request, just the contents though.
2 comments

This is wrong. The domain name is revealed through SNI but the path of the URL is sent as part of the encrypted HTTP request.
HTTPS protects URL parameters. That stuff doesn't go to the DNS request.