HTTPS Response body - Is it secured?

encryption, https, security

Solution

HTTPS is HTTP over SSL. So the whole HTTP communication is encrypted.

Problem

Would like to understand whether the HTTPS body part of the Response is encrypted. Also, in a HTTPS request whether the header are transmitted as plain text / encrypted? Is there any tool with which I can observe the raw HTTPS traffic without decrypting it.

Original source