Quiz

On an HTTPS request, what can an observer on the network still see?

The sizes and timing of the messages

The URL path and query string

The request body

The request headers, such as cookies

The host name, from the SNI field

The server's IP address and port