Quote:
Originally Posted by Barry-xlovecam
In HTTPS the requests for URLs are in plain text -- HTTPS only encrypts the data exchange.
|
? The only thing a sniffer will see in plain text is the hostname when the browser supports SNI. Everything else, including the specific object request, is encrypted.