C03-NS: Yes
Rationale
The selected WSS connection places WebSocket control frames and Nostr messages inside TLS. They are protected from passive link observation after establishment, although the relay reads them. TCP/TLS framing remains visible; masking alone would not provide this protection.
Assessment method
Documentary analysis
Source context
Primary specification / selected profile