Linked Questions
17 questions linked to/from Is it common practice for companies to MITM HTTPS traffic?
0
votes
1
answer
1k
views
Should I be concerned if my employer is performing man-in-the-middle HTTPS attacks? [duplicate]
I have reason to believe that my employer may be performing HTTPS man-in-the-middle attacks on company-issued work laptops, as Java's SSL Certificate lists my employer as the Certificate Authority.
...
- 1,535
1
vote
1
answer
606
views
Why are website (such as gmail.com) certificates issued by my company? [duplicate]
At my company, I get a warning flag that the traffic to the website may not be secure (enough). For instance: outlook.com and gmail.com. When I open the certificate I see this "issued for" and "issued ...
- 425
2
votes
1
answer
905
views
MITM in "Next generation" firewalls becoming a norm? [duplicate]
So I went to a seminar lately and heard about the "SSL inspection" part of Nextgen firewalls. It was basically MITM to be able to monitor the users of the network. Is it becoming a common practice in ...
- 31
1
vote
1
answer
750
views
can my corporate firewall read my https packet? [duplicate]
From what I know, with https the packet is totally encrypted except its destination.
Does that mean that my corporate firewall and the guys working there will not be able to read my https packet in ...
- 133
1
vote
1
answer
593
views
When logging into my work WiFi (we are allowed to do this) what exactly can they see? [duplicate]
My work lets us log onto their WiFi with our personal phones. We don’t have to log on every time; it just connects automatically. I have nothing downloaded on my phone from my work that they could ‘...
- 31
245
votes
14
answers
48k
views
My college is forcing me to install their SSL certificate. How to protect my privacy?
My college administration is forcing us to install Cyberoam Firewall SSL certificate so that they can view all the encrypted traffic to "improve our security". If I don't install the certificate than ...
- 2,171
128
votes
11
answers
458k
views
Can my employer see what I do on the internet when I am connected to the company network?
This is an attempt at a canonical question following this discussion on Meta. The aim is to produce basic answers that can be understood by the general audience.
Let's say I browse the web and use ...
- 4,017
64
votes
3
answers
14k
views
Why is Firefox (and only Firefox) reporting that my connection is insecure on multiple sites?
After installing Firefox 54.0.1 on my work laptop, the first page I see warns me that "Your connection is not secure" when opening https://www.mozilla.org/.
"The owner of Firefox has configured their ...
- 1,535
42
votes
3
answers
7k
views
Why is the issuer certificate different at my workplace and at home?
I have viewed Gmail's certificate chain at my workplace, and I realised it's different. It looks like this:
Root CA
Operative CA1
___________.net
mail.google.com
When I get the ...
- 665
27
votes
5
answers
13k
views
Can a VPN Provider MitM my SSL traffic without me noticing?
If I connect to lets say gmail over a VPN. How does the provider forward the traffic without exposing my IP, but also without breaking the SSL. Shouldn't gmail know my real IP if the traffic just gets ...
8
votes
1
answer
2k
views
Is a self-signed certificate from my ISP-provided router a security threat?
I recently found out that in order to log on to the web-based administration tool on my ISP-provided router, I need to accept a self-signed certificate it offers. I did a bit of reading and it sounds ...
- 83
0
votes
2
answers
488
views
How to check Google SSL certificate?
I encountered this error on Google Chrome on my Windows 10. I solved it by installing the certificate and now it is working fine.
I wonder, how do I know the certificate I have is legit? That is, ...
- 103
2
votes
1
answer
473
views
How does advanced firewall scan data (check for signature etc) if it is encrypted?
Let's say for normal web browsing, since it's using HTTPS, all the data will be encrypted. In that case, how does the firewall/IDS/IPS check for signatures to detect anomaly/virus/malware?
0
votes
1
answer
2k
views
Can employer see ssl content on wifi [duplicate]
Doing research, I haven't found anything specific to my question. I work for a small local company with 15 employees. I originally hooked up the internet but we hired an I.T. Company recently. We have ...
- 1
0
votes
1
answer
530
views
How much can my company track me? [duplicate]
It is common sense that companies networks are being monitored and they can track what https you visited. But how much does companies have access to on tracking your usage?
HTTPS and websites are a ...
- 103