• exu
      link
      fedilink
      English
      24 days ago

      Not really, because the client system is configured to go through the proxy. That proxy will connect to the website and do filtering on the unencrypted content because it is initiating the connection. Next it’ll re-encrypt everything with its own certificate and serve it to the client.

      • @[email protected]
        link
        fedilink
        English
        24 days ago

        Oh you’re talking about enterprise scale mitm attacks on your own coworkers not the general case.

        • exu
          link
          fedilink
          English
          13 days ago

          Yes, but that’s what you would need to do and get if everyone had to install an intermediate cert.