[nebster]

The article explained how the fragment part of the URL (everything after the #) isn't sent to the server. It's only client-side.

So even if the URL isn't encrypted in HTTPS (it is though), it wouldn't matter.