it can, just not as easily as MITM proxies: https://wiki.wireshark.org/TLS