Employees are often required to install local certs (or applications/scripts that do that) - that doesn't mean the host is entirely compromised.
If they are forced to install those certs, then the computers they use belong to their employers, and those computers are obeying their proper owners. I fail to see the problem.
Don't use your work computer for things you don't want your work to be able to detect, intercept & modify.
Don't use your work computer for things you don't want your work to be able to detect, intercept & modify.
with that logic, don't get mail sent to the office because your employer has every right to open and reseal the envelope.You know who also has that right? Prisons.
I don't have things sent to the office unless they comply with my employer's policies (e.g. I'd never have a weapon mailed here), and unless I'm happy with my employer having information about my packages.
I'm curious what line of reasoning would justify me doing such a thing and expecting privacy.
> You know who also has that right? Prisons.
You know who also has that right? You, on any network and hardware you own. My employer owns my laptop and the network it's connected to: of course it has every right to inspect its own property.
The law says that if employers own the computers they provide to employees, then employers have broad latitude to monitor how those computers are used.
A different law says that only the recipient of a US Postal letter may open it. If you receive a personal letter at your office via US Postal Service, your employer cannot legally open it.
I'm not up to date on what the law says about FedEx or UPS.
For my last gig, I worked at some company on behalf of another. This workplace was quite explicit about intercepting and monitoring everything. I pondered for a second whether I should use this place's computers to log to my employer's webmail. I gave up and did it, because I wasn't going to read or write work emails outside of office hours.
Personal stuff however I didn't dare.