Reputation: 35689
When using a HTTPS connection are browser cookies and HTTP headers visible as plain text? That is, is only the body of the HTTP content encrypted?
Upvotes: 4
Views: 979
Reputation: 60007
All https is http over an encrypted connection i.e. the contents of the TCP/IP packets are encrypted.
Upvotes: 1
Reputation: 5178
Both the request and response are fully encrypted – so the cookies and all headers are protected. About the only thing visible to an external sniffer is the host and remote address (IP) that you're requesting.
Upvotes: 5