I'd be really shocked if that's the case, they're essentially sabotaging their own security by exposing a single surface for attack for MITM attacks. Most corp

I'd be really shocked if that's the case, they're essentially sabotaging their own security by exposing a single surface for attack for MITM attacks. Most corporate environments typically do not "proxy" SSL, I know this from experience administrating networks and later abusing this with an SSH tunnel on port 443 allowing me unfettered access. I'd be very interested in technical details on how that's implemented if it is.