Subj : Re: Privacy is Power: tak To : Sean Dennis From : Kurt Weiske Date : Fri Sep 10 2021 06:56:00 -=> Sean Dennis wrote to Kurt Weiske <=- KW> My network team is essentially performing a man-in-the-middle attack on KW> any SSL packets leaving the corporate network, and it breaks a ton of KW> things. SD> Not to sound obtuse but why? That violates the security priciples I SD> know. Why not inspect the packets before the SSL layer? Is there a SD> genuine technical reason for doing something so stupid? It's old-school, non zero-trust security. They want a monolithic approach, putting your defenses into a central firewall like they did in the 2000s, and vendors are more than happy to provide. SD> At John Deere, they had a BYOD allowance but you had to run their SD> software on it to access company data and they had the right to wipe SD> your phone via remote if they felt the need to do so at any time, with SD> or without notice. I think most companies have a similar mobile device management policy, as well as requiring encryption, strong passcodes, etc. SD> That never sat well with me so I carried two cell SD> phones. I really hated that. I still hate carrying a cell phone and SD> I'm tempted to just get a numeric pager. Oh, that would be fun. Most people wouldn't know what to do with a pager! I've mentioned before that I liked pager culture. If someone needed assistance after work hours, they had to be invested to do so - they needed to be available for me to call them back, to explain the issue, and I could set expectations on when their issue could be resolved. Now, someone sends an email at oh-dark-hundred and the game clock starts, so to speak, in their head - regardless of how long it'll really take, whether or not I have the information I need to proceed, etc. Then, people started getting cell phones. There were some odd times carrying a pager and a cell phone, receiving a page, calling the person back, and then asking them to call you to save your minutes. .... Abandon desire --- MultiMail/DOS v0.52 * Origin: realitycheckBBS.org -- information is power. (618:300/1) .