3 ms·
It's pretty common for corporate networks to have MITM devices snooping on all traffic by default (usually exceptions are made for known medical sites and for h
by simiones 3y ago
It's pretty common for corporate networks to have MITM devices snooping on all traffic by default (usually exceptions are made for known medical sites and for high-bandwidth traffic like YT). This is a big enough use-case that special provisions were made for it in TLS 1.3.
- hammock 3y agoEven if you’re not on the company vpn?
- haspok 3y agoIf you are using hardware provided by the firm, you ARE on the VPN. If not, network is blocked (as are all private hardware items like pen drives, for obvious reasons).
- hammock 3y agoThat’s not always the case
- simiones 3y agoNormally not, but: to make the MITM work, your PC is pre-configured to trust the company's certificate authority as a trusted root. This is not a per-connection setting, it's a global setting in your browser(s) & OS. So, IF they have a technical way to intercept your traffic even if not connected to the VPN, this will keep working. Of course, in some other cases, a client proxy is configured instead of/in addition to a VPN, in which case obviously all your traffic will be sent to this proxy before reaching the internet.