On Mon, Aug 21, 2017 at 4:05 PM, surfshack66 <[email protected]> wrote:
> Its a work laptop and I believe there is antivirus software on it but I > cannot change any settings. I didnt think that would be a problem > considering the domain I use is https with ssl, so it can't scan web > traffic? > > While that's true in most cases, it depends on the software used. If the antivirus software implements this scanning via browser extensions, it will likely be able to intercept and meddle with traffic after the browser has handled decryption. It's also not unheard of for corporate proxies to do full-blown man-in-the-middle of all SSL connections, relying on their own root certificate having been installed on all employees' computers. Do you see the same issue when using a non-work laptop without such software present? - Mike
