Editing HTTPS (section)

===Network layers===
HTTP operates at the highest layer of the [[TCP/IP model]]—the [[application layer]]; as does the [[Transport Layer Security|TLS]] security protocol (operating as a lower sublayer of the same layer), which encrypts an HTTP message prior to transmission and decrypts a message upon arrival. Strictly speaking, HTTPS is not a separate protocol, but refers to the use of ordinary [[HTTP]] over an [[encryption|encrypted]] SSL/TLS connection.

HTTPS encrypts all message contents, including the HTTP headers and the request/response data. With the exception of the possible [[Chosen-ciphertext attack|CCA]] cryptographic attack described in the [[#Limitations|limitations]] section below, an attacker should at most be able to discover that a connection is taking place between two parties, along with their domain names and IP addresses.