[Demonsult]

HTTPS reveals the server name in plain text early in the connection process. That, the DNS query and the IP header are tunneled away by a VPN.