The hostname you visit over HTTPS is sent in plain text

HTTPS encrypts your traffic but not the name of the site you asked for. The SNI rides the TLS ClientHello in plaintext, in TLS 1.3 too. A 15-line passive listener read it with zero bytes decrypted. ECH is the fix, and it is barely deployed.