ssl - HTTPS, URL path, and query string

Question

This is a follow up post of my previous question about BASIC auth over HTTPS

Are the path to the resource and query string passed securely to the server if I use HTTPS?

i.e.
URI: http://server/path/to/a/resource?with=a&query=string
Server: server
path: /path/to/a/resource
query string: with=a&query=string

Answer 1

This is a really good explanation of this: http://answers.google.com/answers/threadview/id/758002.html#answer

Summary: only the host and port would be visible unencrypted.

In short, yes. But you shouldn't store sensitive data in URL's since it may be visible in the browsers history and server logfiles. And anyone who looks over your shoulder sees it too.