You can monitor traffic without interception, just look for SNI extension part of SSL traffic and you'll obtain hostname (all modern browsers use SNI by default

You can monitor traffic without interception, just look for SNI extension part of SSL traffic and you'll obtain hostname (all modern browsers use SNI by default). So it's easy at least know what sites people visit.