• exu
    link
    fedilink
    English
    24 days ago

    Not really, because the client system is configured to go through the proxy. That proxy will connect to the website and do filtering on the unencrypted content because it is initiating the connection. Next it’ll re-encrypt everything with its own certificate and serve it to the client.

    • @[email protected]
      link
      fedilink
      English
      24 days ago

      Oh you’re talking about enterprise scale mitm attacks on your own coworkers not the general case.

      • exu
        link
        fedilink
        English
        13 days ago

        Yes, but that’s what you would need to do and get if everyone had to install an intermediate cert.