Authentication requests for HTTPS calls through an HTTP proxy

Am I right in thinking that if you have a service protected by SSL on the other side of an HTTP proxy which requires authentication that:

• You authenticate using HTTP sending an unencrypted (albeit base64 encoded) username and password to the proxy (without which I receive a 407), which will then allow...


• An HTTPS session to be opened to the service on the other side of the proxy.