3 ms·
Just as a heads up on this, slack doesn't even use HTTPS! Your employer can certainly read all private slacks on your work network, even if it's a non-work-slac
by alexandercrohde 8y ago
Just as a heads up on this, slack doesn't even use HTTPS! Your employer can certainly read all private slacks on your work network, even if it's a non-work-slack workspace
- ninkendo 8y agoDo you have a source for this? That sounds very surprising if true.
- teraflop 8y agoThis is absolutely not true, as a cursory examination of your browser's dev tools will reveal.
- ReidZB 8y agoPretty sure it uses HTTPS, but if you're on a corporate network on corporate hardware, there is a real chance that there's a corporate MITM proxy that is capable of reading all of your HTTPS traffic.
- isostatic 8y agoOnly if you have their root certificate trusted
- maxxxxx 8y agoYou have to do that if you want to do any work.
- doesnt_know 8y agoFrom experience, if the org is doing https mitm then it almost certainly also has network device authentication (eg Cisco ICE) that would only allow corporate whitelisted devices. Usually with custom builds that would already have the corp root cert trusted.
- judge2020 8y agocurl http://slack.com -v < HTTP/1.1 302 Found < location: https://slack.com/