Comment by tomsonj

it can still be an https message, who cares what the path, query string, or headers look like? that is all encrypted