Quote from: taipo on June 24, 2014, 12:21:35 PM

Quote from: robix on June 24, 2014, 10:09:33 AM

Don't think so. AFAIK the transfer of the complete URL is already encrypted.

Now that I think about it, only the host name part of the URL would be visible to an eavesdropper on a network.

https://eligius.st/~wizkid057/newstats/userstats.php/1zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz

So my bad on that one :-/.

Standard SSL ciphers all the communication in a way that the url is only known after the handshake is done and the server certificate is provided, this indeed is a problem for sites as it forces to have only site per IP.
Currently most browsers support an protocol extension to provide with the url in clear text but it is on the user side so you can disable it if you wish.

So no, SSL ciphers all the stream, not even the hostname is known for an eavesdropper, only the IP and port is known.