cometta
cometta

Reputation: 35689

Are browser cookies and other headers visible during HTTPS?

When using a HTTPS connection are browser cookies and HTTP headers visible as plain text? That is, is only the body of the HTTP content encrypted?

Upvotes: 4

Views: 979

Answers (2)

Ed Heal
Ed Heal

Reputation: 60007

All https is http over an encrypted connection i.e. the contents of the TCP/IP packets are encrypted.

Upvotes: 1

djd
djd

Reputation: 5178

Both the request and response are fully encrypted – so the cookies and all headers are protected. About the only thing visible to an external sniffer is the host and remote address (IP) that you're requesting.

Upvotes: 5

Related Questions