[emillon]

TLS is one layer below HTTP. So yes, both headers and body are encrypted.