Like many people I work within a company that deals with internet access of its employees by providing a proxy server.
Although i got the idea that a https session encrypts, from peer to peer, all the traffic between my browser and the server at the end, I have been told by one of our sysadmin that all my https connections are somehow « deconstructed » or « unravelled » by the corporate ssl proxy. And, by this way, consequently, my employer could easily see and read all my web access including all my https sessions.
Is it true? °_°