My work lets us log onto their WiFi with our personal phones. We don’t have to log on every time; it just connects automatically. I have nothing downloaded on my phone from my work that they could ‘spy’ on me with.
Am I right in thinking if it is a secure site, for example, google.com if I search let's say for Facebook on the google domain it would just come up as google.com on the network traffic log providing there was no man in the middle attack from my employer?
Which brings me to my next question: how do you know if your employer is doing man-in-the-middle attacks?
Lastly, when logged onto Facebook can they see my messages that I send over their network in clear text?
I’ve probably been logged into the WiFi for about 3 years and never thought about what they could actually see until my friend mentioned why she uses a VPN.