That doesn't address GP's point. You can redirect encrypted traffic all you want. That won't help you read its content.