3 ms·

The side effect of this is that corporate networks will become draconian in what services can be accessed from their networks. Expect everything outside of 10./

The side effect of this is that corporate networks will become draconian in what services can be accessed from their networks. Expect everything outside of 10./8 to be black holed; No internet access of any kind. The company's legal requirement to prevent data exfiltration trumps your ability browse reddit during your lunch break. Plus, if they can't monitor the connection, they will monitor the endpoint.

woolvalley 9y ago
Most places already monitor the endpoint already.
jessaustin 9y ago
If only everyone with a job and most people without one had some kind of personal network device, compact enough to be kept in a pocket or purse yet powerful enough to "browse reddit"... Lots of corporate networks probably should be locked down to that extent. If they can't set up their own CA they're probably not doing a great job protecting their customers' private information.
tialaramex 9y ago
The reality is that corporations always exist under a tension between an inclination to forbid everything, for fear it will cost the company money or reputation, and a need to allow everything so that people can get their jobs done or are willing to work there. The Internet is nothing special in this respect, large companies struggle to make policies that cover all the bases without strangling themselves and they will err on both sides of the line, sometimes learning from their mistakes and sometimes not so much.
fulafel 9y ago
I doubt this, but if it happened, would there be any downside? Your lunch break browsing deserves privacy too and you should do it on your own device (or own hotspot at the very least).
dullgiulio 9y ago
I don't get your comment. They should monitor the endpoint, of course. I guess it has to be legal (in some Countries it is not) and written in your work contract. How do you think Google found out Levandowski was stealing blueprints? Definitely not by meddling between TLS endpoints.

woolvalley 9y ago

Most places already monitor the endpoint already.

jessaustin 9y ago

If only everyone with a job and most people without one had some kind of personal network device, compact enough to be kept in a pocket or purse yet powerful enough to "browse reddit"... Lots of corporate networks probably should be locked down to that extent. If they can't set up their own CA they're probably not doing a great job protecting their customers' private information.

tialaramex 9y ago

The reality is that corporations always exist under a tension between an inclination to forbid everything, for fear it will cost the company money or reputation, and a need to allow everything so that people can get their jobs done or are willing to work there. The Internet is nothing special in this respect, large companies struggle to make policies that cover all the bases without strangling themselves and they will err on both sides of the line, sometimes learning from their mistakes and sometimes not so much.

fulafel 9y ago

I doubt this, but if it happened, would there be any downside? Your lunch break browsing deserves privacy too and you should do it on your own device (or own hotspot at the very least).

dullgiulio 9y ago

I don't get your comment. They should monitor the endpoint, of course. I guess it has to be legal (in some Countries it is not) and written in your work contract. How do you think Google found out Levandowski was stealing blueprints? Definitely not by meddling between TLS endpoints.