My company (like many others I assume), uses a "man in the middle" proxy with a personal root CA.
Disclaimer : I'm not a security expert so perhaps I do not correctly understand what this network configuration does, so the following question assumes that this config is used to be able to decrypt my HTTPS traffic.
What justifies this practice? What are the use cases? Is this to be able to catch viruses in the traffic? Or is this used to verify what website employees go to or what data they send to the internet (data leak prevention)?
Since I'm not aware why it's used, I feel like this practice is a breach of privacy. For example, some companies tolerate to check private mails or even to make a quick payment by e-banking if needed. But then if they use a MITM, people should be aware that the IT dpt will be able to read the data (login/password, account balance,...) which is supposed to be encrypted (TLS).