Query Strings in HTTPS
======================

* _"No URLs, headers or content is visible in the packet trace"_ ― [How Secure Are Query Strings Over HTTPS? | HttpWatch Blog](http://blog.httpwatch.com/2009/02/20/how-secure-are-query-strings-over-https/)
* _"Yes, but"_ ― [ssl - Is an HTTPS query string secure? - Stack Overflow](http://stackoverflow.com/questions/323200/is-an-https-query-string-secure)
* [True or False: The query string is encrypted in an HTTPS GET request. | mattfleming.com](http://mattfleming.com/node/289) : **True**
* _"…all URL data (with the exception of hostname, which is used to establish the connection) is carried solely within this encrypted connection"_ ― [Google Answers: HTTPS - is URL string itself secure??](http://answers.google.com/answers/threadview/id/758002.html)
* _"Conceptually, HTTP/TLS is very simple. Simply use HTTP over TLS precisely as you would use HTTP over TCP."_ ― [RFC 2818 - HTTP Over TLS](http://tools.ietf.org/html/rfc2818)