Slightly tangential: Today, one of my staff (we're an IT company, I'm CREST accredited etc etc) connected up a NextCloud client to our NextCloud instance on a

Slightly tangential: Today, one of my staff (we're an IT company, I'm CREST accredited etc etc) connected up a NextCloud client to our NextCloud instance on a laptop and noted that the SSL cert was untrusted. The cert. on our NextCloud is a Let's Encrypt job. He was using a laptop provided by a customer (he works there a lot) and they deploy a MitM web proxy that he was perhaps only dimly aware of. I haven't look too deeply into the laptop config but it looks like either the MitM CA wasn't installed as trusted or the NC client is a bit clever. Now, I'll plump for: screw up in other corp. IT. So we have a techie ignoring warnings from an app that is designed to share data safely. OK, the customer's IT dept have their policies but I would have hoped that the default from my employee would have been to quietly walk away and uninstall NC from that laptop (he did after a few words.)