It's not really surprising.
Breaking PKI by installing fake CA certs so that IT can MITM every connection is now an Enterprise Best Practice (tm).
In case the sarcasm isn't evident, please read the above as sarcastic. I detest admins who do this.
Breaking PKI by installing fake CA certs so that IT can MITM every connection is now an Enterprise Best Practice (tm).
In case the sarcasm isn't evident, please read the above as sarcastic. I detest admins who do this.
This is absolutely a best practice in some corporate environments for DLP. There's no better way to ensure sensitive data isn't being exported via TLS connections.
There is no reason, however, to do this to a child's device. Their teacher and their parents should have a grasp on this, not a school IT department, third-party contractor, government or worse.
No, it's not, and this attitude is a major cause of resentment among technical employees.
The "DLP" industry, in general, is a solution in search of a cause. If you can't trust your employees, you'll never be able to stop the determined ones.