In practice it's usually done with SSL termination (MITM but you have a trusted certificate)

Adguard Docs on it: https://kb.adguard.com/en/general/https-filtering#how-does-h...

Charles Proxy: https://www.charlesproxy.com/documentation/proxying/ssl-prox...