HTTPS encrypts all message contents, including the HTTP headers and also the request/reaction data. Excluding the probable CCA cryptographic attack described in the constraints part down below, an attacker need to at most give you the option to find that a link is taking place in between two events,