Proxies with MITM (mostly corporate) would see everything, because they are terminating client SSL/TLS.