Encryption of HTTPS headers

Question

To what extent, if at all, are HTTPS headers encrypted?

Answer 1

They are encrypted in transit through SSL. There is no special encryption dedicated to headers, HTTPS encrypts the entire message.

Answer 2

All headers are encrypted in HTTPS. You may want to look at some documentation on how SSL and TLS work.

Answer 3

SSL sets up a private authenticated link to the server and then sends an http request over that link. The evil-doer snooping on the link cant actually tell from just watching the connection that http is being used. SSL its self has some unencrypted headers that it uses to establish this connection though these should not be confused with the headers that are part of the http protocol.