Comment by manishsharan

8 years ago

This is well and good but I wish Microsoft would take a strong stance on corporations launching MITM attacks on their employees' HTTPS sessions by injecting their SSL certificates on every session. I can understand corporations blocking sites like facebook but I don't see why they need to read everything I read on the web.

Sounds like an issue for lawmakers or HR are your workplace, not Microsoft...

Microsoft is a technology company, they aren't in charge of the HR or management at your workplace and consequently shouldn't be trying to fix HR issues using technology. There's plenty of legitimate uses for MitM-ling TLS, and in some circumstances even that is one of them (e.g. on hardened networks with VPN endpoint interconnects).

If you are on their time and their equipment, they have every right to know what you are doing. End of story.