I am testing a C# web API hosted on a remote server, and I am monitoring HTTPS traffic using Fiddler.
What confuses me is that via Fiddler I can see all of the POST payload, headers and host URL addresses for both the request and the response. Shouldn't the SSL certificate actually encrypt this data, or at least some of it? I tried to find an example of encrypted HTTPS requests but I am not able to find it.
Why am I able to see an entire HTTPS request in Fiddler?