title: With HTTPS, are the URL and the request headers protected as the request body is?
body: <p>Just want to verify, when making a SSL connection (http post) to say:</p>
  
  <pre><code>https://www.example.com/some/path?customer_key=123123123
  </code></pre>
  
  <p>If you don't want anyone to know about customer_key, this approach will not work even if I am making a https connection correct?</p>
  
  <p>All data that I want secured has to be in the request body right?</p>