title: Is it normal to be able to see https headers?
body: <p>I've written a small application using delphi to update my twitter status.
  I use Indy 10 and OpenSSL and everything works fine, which means that i can both authenticate my app and update my status.</p>
  
  <p>The thing is that if i use a program like "http analyzer" i can see the request's headers and so i can see sensitive information like the consumer_key.</p>
  
  <p>Is that normal or is it a sign that i have not set properly the iohandler (TIdSSLIOHandlerSocketOpenSSL)?</p>
  
  <pre><code>mSslIoHandler.SSLOptions.Method := sslvSSLv3;
  mSslIoHandler.SSLOptions.Mode := sslmBoth;
  mSslIoHandler.SSLOptions.VerifyMode := [];
  mSslIoHandler.SSLOptions.VerifyDepth := 0;
  </code></pre>