title: If a site is secured via SSL, can a network sniffer still read the URLs being requested?
body: <p>Can URLs be sniffed even though a client communicates with a server over SSL? I'm asking because I'm doing remote login &amp; redirect to a physically different server via URL, and wondered if securing the communication via SSL would prevent replay attacks and the like.</p>