Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I am working in a IT company. I am using LAN for all internet activities. I send some email from my personal gmail account. My network administrator sniffed all email I send from LAN and he shows the email to me.

I am sure no software installed my system and I used https to send email. How did the network administrator sniff my email? How can I prevent this?

share|improve this question
    
you were using the gmail https interface to send mail, or another email client? Where did you send the email to? Someone in your company? –  schroeder Jun 17 '13 at 14:31
2  
Use your phone and stay off company WiFi –  DKNUCKLES Jun 17 '13 at 16:25
add comment

1 Answer

up vote 15 down vote accepted

Your case is common in the corporate world, it is usually described as corporate MiTM. When you connect to the Internet from inside your network, you're likely connecting to a gateway/router the belongs to your company first. That router can simply hand you public key in a "fake" certificate whenever you connect to an SSL-enabled site and fool your browser into thinking it is the real website. Thus, making your SSL connection completely transparent.

Of course, when that happens, your browser should give you a warning that you're being handed a fake certificate. BUT, in a cooperate environment, you're likely given a company-owned computer and/or connecting to the company's Domain Controller, which gives the sysadmins enough access to install the company's fake certificate to the trusted root certificate store in your computer, which will suppress the browser's warnings.

Removing the certificate will likely disconnect you from other company services (the mail server, intranet websites, etc.). However, using an addon called Certificate Patrol, you'll be at least notified when that happens (somebody MiTMing your SSL connection), but it can't do anything about the attack.

You could VPN/SSH to your home network and use that to connect to the Internet, but chances are that they intercept that as well. There's really nothing you can do about it. They give you the Internet access, they can do whatever they want.

Bottom line is: Do work stuff at work, and personal stuff outside

share|improve this answer
    
Is there a Plugin for chrome too? –  The All Seeing Eye Jun 17 '13 at 14:42
    
@Polymorphin I'm unaware of any equivalent addon for Google Chrome. Perhaps others know something. –  Adnan Jun 17 '13 at 14:51
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.