The whole page. You can confirm this for yourself -- fire up a Wireshark session then navigate to an HTTPS site. You'll see the SSL/TLS negotiation, then only encrypted traffic after that (as opposed ...