How does decryption happen on a client browser (response) over SSL when private key is only there in the server in which public key is distributed to clients for encrypting the server request?
Can a NAT router effectively decrypt all the SSL data that is tunneled from the server to a client behind the same NAT?