Can you confirm that the title is correct and that it encrypts rather than hashes?

Both are concerns, but sending interpretable data is a more serious concern.

I scanned through the article and did not see an example of the header it added.

It says RSA public key encryption in the article, so I’m going to assume that it’s not a typo.