What HTTPS actually protects
A user loads https://example.com/account?id=91 over a public network.
What can an observer on that network see?
A user loads https://example.com/account?id=91 over a public network.
What can an observer on that network see?