Does it work like an https proxy (with CONNECT) or a socks proxy? Because if it is instead actually unwrapping the connection somehow (eg. mitm) then they woul

Does it work like an https proxy (with CONNECT) or a socks proxy? Because if it is instead actually unwrapping the connection somehow (eg. mitm) then they would be able to see the content, and that seems like a huge no-go -- both for the users, AND for apple as I would think it would open them up to liability. note: they certainly would be able to see unencrypted http traffic regardless though.