HTTPS doesn't encrypt the domain name of the HTTP request, so you can implement domain-name-based filters on encrypted traffic. My workplace does this (as do many) to block access to sites they don't want employees visiting at work, even when those sites use HTTPS.
Re:
Re: Heh