title: Which part of the communication is encrypted under a HTTPs communication?
body: <p>When my browser sends a request under a HTTPs communication which parts of the request are encrypted?</p>
  
  <ul>
  <li>URL (I suppose not)</li>
  <li>GET params (I suppose not)</li>
  <li>POST/PUT params</li>
  <li>Cookies</li>
  <li>Headers</li>
  <li>...</li>
  <li>The response of the server</li>
  </ul>
  
  <p>I'm concern about this because I was implementing an API where there was private data into the URL with the hope of it to be protected by a HTTPs communication, but I'm afraid the URL it self is not encrypted.</p>