1 | initial version |
Well, can you decode TLS to actually read the content?
Otherwise TCP port 443 implies HTTPS and TLS is detected. So the representation may look odd but this is the order in which things are discovered as you read the packet.
And it may also depend a lot on how you detect protocols in WireShark.
But I guess this is more a tomato vs tomato thing. (You drink coffee, I drink tea my dear)