HTTPS encrypts all information contents, including the HTTP headers and the ask for/response info. Except the achievable CCA cryptographic assault explained in the constraints segment under, an attacker should really at most have the opportunity to find out that a link is occurring among two get-togethers, as well as their area names and IP address