@t0fr@lemmy.ca to Privacy@lemmy.ml • 2 years agoNot that you guys need the reminder, but your work sees all your browser history and you may not even be able to delete it if you wanted tolemmy.caimagemessage-square246arrow-up19arrow-down10
arrow-up19arrow-down1imageNot that you guys need the reminder, but your work sees all your browser history and you may not even be able to delete it if you wanted tolemmy.ca@t0fr@lemmy.ca to Privacy@lemmy.ml • 2 years agomessage-square246
minus-squareTrailblazing Braille Taserlinkfedilink1•2 years agoNot if your employer has installed a root CA on your machine, enabling them to man-in-the-middle all your TLS connections.
minus-square@lejsh@lemmy.mllinkfedilink1•2 years agoNot necessarily, as the browser is still logging the history.
minus-squareQuazarOmegalinkfedilink1•2 years agoWell that’s what private mode is for, to dump the local data after closing the browser session
minus-square@lejsh@lemmy.mllinkfedilink1•2 years agoI know I’m here a week later, but a large number of system administrators disable browser proxy systems, dns over https, and incognito. It’s a neverending war.
minus-squareQuazarOmegalinkfedilink1•2 years agoPretty much, but (noob question) how can they block DoH, wouldn’t they have to block HTTPS completely as well?
minus-square@lejsh@lemmy.mllinkfedilink1•2 years agoThey control the browser settings itself. It’s either a work managed device or profile.
If allowed, doesn’t DoH/DoT mitigate this issue?
Not if your employer has installed a root CA on your machine, enabling them to man-in-the-middle all your TLS connections.
Oh that’s a thing? That’s kinda frightening
Not necessarily, as the browser is still logging the history.
Well that’s what private mode is for, to dump the local data after closing the browser session
I know I’m here a week later, but a large number of system administrators disable browser proxy systems, dns over https, and incognito. It’s a neverending war.
Pretty much, but (noob question) how can they block DoH, wouldn’t they have to block HTTPS completely as well?
They control the browser settings itself. It’s either a work managed device or profile.
Ah ok that makes sense