&gt; If an attacker is able to gain root access to your proxy, or inline with a TAP where your proxy is sending intercepted traffic to, you probably have much bigger problems.<p>Bigger problems than an attacker being able to decrypt and modify all of the TLS sessions in your company? If you have bigger problems than that then they&#x27;ve presumably spilled out of the realm of IT problems entirely and you&#x27;re dealing with some kind of government lawyers or maybe a large uncontrollable fire.