A review of SO doesn\'t categorically answer this question. It could be implied, but I would like to get it on the record specifically.
If SSL is active, it will enc
SSL encrypts the entire HTTP session, including headers.
That is why they renamed it TLS for "Transport Layer Security". The "Transport Layer" sits below the "Application Layer" (among others) in the network stack.
So yes.