[rahimnathwani]

DNS gives you only hostnames, not full URLs.

Snooping TLS to get FQDNs gives you only hostnames, not full URLs.

Over 50% of the top million web sites automatically redirect visitors to HTTPS. Any URLs can only be read if you can install software or your own certificate on each monitored endpoint.

[mhkool]

correct, but that does not make coverage calculations incorrect since it is based on the snooped FQDNs.