3 ms·

I well understand the security apologist’s approach to corporate device management and network security etc. I lead citing your response as being something I d

by dcow 2y ago

I well understand the security apologist’s approach to corporate device management and network security etc. I lead citing your response as being something I don’t understand at a social-political level. From where does a company derive its power and authority to TLS inspect aka spy on its employees when it is by and large illegal to wiretap employees outside of specific allowed circumstances? Why is this legal and why do we broadly accept it? Checkout https://honest.security/ https://honest.security/

gruez 2y ago
>I lead citing your response as being something I don’t understand at a social-political level. From where does a company derive its power and authority to TLS inspect aka spy on its employees when it is by and large illegal to wiretap employees outside of specific allowed circumstances? Why is this legal and why do we broadly accept it? They're both legal with proper notices. It's illegal to wiretap phones, but if you slap a "this conversation is being recorded for quality control purposes" it's suddenly legal. The same exists for TLS inspection. It requires the company's root certificate to be installed, which typically is only done on corporate machines. Such machines usually have a login banner along the lines of "this machine is for work purposes only and all usage is monitored".