[denisu]

Urls are encrypted.

[marcus_holmes]

well, not the whole url, obviously, otherwise the router wouldn't know where to send the request

[dogma1138]

The entire URL is encrypted, the router doesn't need to know anything about the URL to route the packets. The only thing that can leak when you make an HTTPS connection is the DNS query.

[hiq]

The SNI leaks without ESNI:

https://en.wikipedia.org/wiki/Server_Name_Indication#Securit...

[smolder]

TLS server name indication can also leak your host, sadly.

[DaniloDias]

You are confusing layer 4 and later 7 concepts.

Spend some time with wireshark running while you visit “google.com” in a web browser and you’ll get a better intuition on the topic.

[marcus_holmes]

that makes sense, thanks