Junior — Middle
What components of an HTTP request are transmitted in encrypted form when using HTTPS?
sobes.tech AI
Answer from AI
When using HTTPS, the entire HTTP request is transmitted over a secure TLS/SSL channel, which means that the following components of the request are encrypted:
- Method (GET, POST, etc.)
- URL (path and query parameters)
- HTTP headers
- Request body (payload)
The only exception is the domain name in the SNI (Server Name Indication) header, which is transmitted in plaintext during the TLS session establishment to select the server's certificate. Thus, all substantive parts of the HTTP request, including parameters and data, are transmitted encrypted, ensuring confidentiality and data integrity.