That's incorrect. The URI library will parse the URL into a hostname, username, ...

jewel on April 18, 2013 | parent | context | favorite | on: Secure Your REST API

That's incorrect. The URI library will parse the URL into a hostname, username, and password. Only the hostname is sent to the DNS server.

The username and password are sent in the "Authorization" HTTP header, which will be encrypted.