4 ms·
Many companies terminate their internal/corporate TLS traffic on a reverse proxy they control. This typically lets them see employee internet activity in the cl
by throwawaymath 8y ago
Many companies terminate their internal/corporate TLS traffic on a reverse proxy they control. This typically lets them see employee internet activity in the clear.
- dpark 8y agoThis works only if you're on a company-controlled device. If you're on a device they do not control, you won't have their root cert installed and this MITM attack is infeasible. If you're using a company-controlled device, you should of course assume they can see all of your network activity. They could easily be capturing all of your activity on the device itself without any MITM attack.