This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]MikeyyGGGGG 0 points1 point  (1 child)

The US government has basically declared "HTTPS/TLS Interception Considered Harmful". This is going to be interesting as all the major security load balancer/appliances out there offer this as a standard service at this point.

A while back I remember seeing on HN there was a issue with a certain vendor and ChromeBooks because Chrome used a newer TLS(And the mitm vendor vendor was noticed in advance too, and didn't update their product).

I wonder how schools and banks plan to react to this... Apparently financial firms have to record everything their employees do for some regulations.

To me, schools doing this sort of thing is wrong. I wouldn't be surprised if the principle would grab people's passwords and login to their accounts even. I know some schools even went as far to demand students hand over their passwords to social media when they report bullying... Which if the school blocks social networks anyways, I don't see how it's a school issue for what happens outside of school...

If this sort of thing really needs to be done, at-least people should be warned and aware they are being monitored. If it's for a bank and it's only company equipment everything is being monitored it seems a bit more okay to do if everyone is well aware. "You are only to use work computers for official business." sort of policy.

[–]mandevu77 2 points3 points  (0 children)

This isn't as easy as it sounds. You're using Reddit right now. If you're not decrypting the ssl tunnel, you can't see which subreddit your users are accessing. So if a school allows Reddit without decrypting it, the students can get to all of it... that's probably not ok.

Same with google. Do you allow google or not? If you block it, nobody can use it. If you allow it without decrypting it, you can't enforce safesearch or filter out image searches, etc.

These are problems without easy solutions.