Is it possible to get logins over https when I have full control of the network?
For example, all communication at my work goes over the company firewall and I often connect to my personal server that uses TLS.
If I understand correctly, when I connect to my server, first the handshake is done, then the key exchange is accomplished, and then all communication is encrypted. So all what I will do, like logging in, is encrypted with that key. And if someone sniffs for packets, he will see only encrypted communication.
But it is the same story if someone "owning" network? And as a middleman, steal this key? Can he use it? Can he use it for decrypt this communication?
What I know about this topic is that someone can be middleman and change routing of website and "push" me fake website.