TLS Interception: How Corporate Proxies Break HTTPS Privacy

Corporate proxies use TLS interception to decrypt and inspect encrypted traffic by installing a custom root certificate on managed devices. This allows them to read all data, including passwords and private messages, while the browser still shows a padlock. A 2017 study found that most interception products weaken security by using weaker cryptography or broken cipher suites.