If I make a HTTPS request to
subdomain.example.com/api/login?mytoken=JLK90GFSSFGDS4GFRW0
along with uploading a cookie, can a packet sniffer know:
- header information
- subdomain I am requesting
- URL parameters
- cookie contents
- whether it is GZIP compressed
In general, what information is encrypted and what is left plain for a HTTPS packet?