4 ms·
It depends on who you trust. TLS inspection will break the security promise of TLS in a sense because your trust chain is no longer exclusively the operator of
by jcrawfordor 10y ago
It depends on who you trust. TLS inspection will break the security promise of TLS in a sense because your trust chain is no longer exclusively the operator of the website. However, the 'extra link' in that trust chain can be someone that you trust, for example an employer or trusted vendor. In this case, well implemented TLS interception changes the situation from "I trust google.com" to "I trust my employer and google.com", with proper cryptographic verification of both of those steps.