Yea.. If you are using a secure URL with the https:// than all URL parameters are encrypted-- Just like FORM variables.
I had to go through this when I was preparing several sites for PCI. -- /Kevin Pepperman "*Never memorize what you can look up in books*." --Albert_Einstein