> The resource requested is not hidden.
Your GET request, and the server's reply, is encrypted.
The hostname of your request might leak in SNI, or if your DNS lookup was insecure.
It is also plausible that an eavesdropper could make a solid guess as to what you downloaded by counting bytes, but that's obviously not worth much.
