• exu
      link
      fedilink
      English
      21 month ago

      Not really, because the client system is configured to go through the proxy. That proxy will connect to the website and do filtering on the unencrypted content because it is initiating the connection. Next it’ll re-encrypt everything with its own certificate and serve it to the client.

      • @[email protected]
        link
        fedilink
        English
        21 month ago

        Oh you’re talking about enterprise scale mitm attacks on your own coworkers not the general case.

        • exu
          link
          fedilink
          English
          11 month ago

          Yes, but that’s what you would need to do and get if everyone had to install an intermediate cert.