Were Blacks allowed to attend Universities ? <| sep |>~~ The URI request is in plaintext , attach fiddler to your machine and sniff a web request that ' s TLS encrypted and you ' ll see all kinds of plaintext data including the HTTP GET with the URI path . ~~ EDIT I have no idea what I ' m talking about , that ' s what I get for always debugging stuff with SSL decryption turned on . urlsencryptedEDIT # 2 It occured to me that other side channels exist that can leak data about an otherwise TLS protected session . Stuff like art assets and CSS being served via non connections , Ads being served with the ENTIRE URI in the referral param looking at you , Outbrain , and Cookie leaking , which isn ' t a real time exploit against the TLS tunnel , but it can later be used to tell you where a system has been , encryption or not .