[tlrobinson]

Then it's using SNI, which I linked to. The request is still encrypted, but the host name is passed unencrypted using SNI.