Being able to "read" all your encrypted communication doesn't necessarily mean someone is literally sitting at a computer and looking at your data. The "man in the middle" is generally a firewall or proxy appliance, where the IT/Security administrators create rules to block or flag certain types of content. The appliance inspects the packets in plain-text, but it's generally not exposed to a live human.

That said, the general rule applies that you should only do work-related things on your work devices. Even if your traffic isn't being decrypted, some information associated with requests are never encrypted, namely the URI. In other words, even over HTTPS, whether you're just visiting Facebook too much or browsing pr0n, it's all visible to corporate eyes, with or without something intercepting the cert. Be smart and just keep personal things on personal devices.

Being able to "read" all your encrypted communication doesn't necessarily mean someone is literally sitting at a computer and looking at your data. The "man in the middle" is generally a firewall or proxy appliance, where the IT/Security administrators create rules to block or flag certain types of content. The appliance inspects the packets in plain-text, but it's generally not exposed to a live human.

That said, the general rule applies that you should only do work-related things on your work devices. Even if your traffic isn't being decrypted, the name of the site you are visiting - though not the exact URI - is still visible (via SNI). In other words, even over HTTPS, whether you're just visiting Facebook too much or browsing pr0n, the list of sites you are visiting is visible to corporate eyes, with or without something intercepting the cert. Be smart and just keep personal things on personal devices.