HTTPS only protects the payload. The IP addresses of src/dst are still unencrypted. And DNS is also unencrypted (though if "dns over https" catches on, that might change in the future).