I didn't mean that middleboxes are incompatible with corporate networks, but that TLS's design of "your traffic is encrypted and nobody between Alice and Bob ca

I didn't mean that middleboxes are incompatible with corporate networks, but that TLS's design of "your traffic is encrypted and nobody between Alice and Bob can read what they say" is. Middleboxes are a workaround for that. As you say, there are other issues in a BYOD environment but is that common in an environment that uses middleboxes anyway? The problem with middleboxes and TLS v1.3 wasn't that IT can see you're on Google, it's that you go to Google and get a grey page that says LOL_SSL_ERROR.