slem
joined 1 year ago
The domain name is sent in cleartext at the start of the connection so that the server knows which virtual server you are connecting to, and which encryption key should be used for the connection (as a single server may be serving multiple sites, which can use separate encryption keys). See e.g. https://en.m.wikipedia.org/wiki/Server_Name_Indication for a more detailed explanation.
So the VPN provider can see the site you are connecting to, but not the full URL, just like an ISP can.
Driving around on a bike that would get ticketed for too low speed and killing everything and everyone that I come across (Days gone).