Aren't CloudFlare and other CDNs an easy target for that? They have to decrypt and then re-encrypt all trafic going through them.