I just discovered that our corporate IT dept. installed their own Trusted Root CAs via GPO over the weekend, so now all HTTPS traffic via our Windows PCs is sniffable by them.  I am not pleased with this - I really don&#x27;t trust them to not poke around and view passwords, or keep my information safe.  And of course it completely breaks Firefox, unless I make exceptions and&#x2F;or install their root cert within FF.  I will be using my own devices more for when I need real security.<p>So - is there any way to know what 3rd-party product is being used to do the monitoring, short of asking them?  Is there any way to know if the root certs are &quot;secure&quot;?  How soon should I start looking for a new job? :)
Ask HN: Options when corp IT installs their own root certs for https sniffing?