[coffeeandbooks]

> middlebox doesnt see plaintext, it sees encrypted TLS, decrypts it, inspects in memory, and ecnrypts it back again to send it to next hop.

So it sees the plaintext.