Are HTTPS URLs encrypted?

Daniel Kivatinos picture Daniel Kivatinos · Jan 31, 2009 · Viewed 299.6k times · Source

Are all URLs encrypted when using TLS/SSL (HTTPS) encryption? I would like to know because I want all URL data to be hidden when using TLS/SSL (HTTPS).

If TLS/SSL gives you total URL encryption then I don't have to worry about hiding confidential information from URLs.

Answer

Marc Novakowski picture Marc Novakowski · Jan 31, 2009

Yes, the SSL connection is between the TCP layer and the HTTP layer. The client and server first establish a secure encrypted TCP connection (via the SSL/TLS protocol) and then the client will send the HTTP request (GET, POST, DELETE...) over that encrypted TCP connection.