What parties have access to the full requested URL of a website accessed via the HTTPS protocol?
Here are some possibilities I can think of, and there could be more:
- local device accessing the website
- local network provider (wired or wireless)
- each hop along the internet to the destination
- big brother
- destination ISP
- destination local network provider (typically wired, but can be wireless)
- destination modem
- destination router
- destination host
Note that this question is specifically about the full requested URL, which would include the specific page being accessed as well as all parameters being passed via the URL.
Also, are there any steps along the way that would not have access to the entire HTTPS request header?