Can you confirm that the title is correct and that it encrypts rather than hashes?

Both are concerns, but sending interpretable data is a more serious concern.

I scanned through the article and did not see an example of the header it added.