Skip to main content
The 2024 Developer Survey results are live! See the results

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

15
  • 104
    I believe the employee is well within his right to complain in such case. Just thought I'd add that. Also when talking about "trusted parties" who are you exactly referring to - do you have any reasons to trust them beyond the fact they told you they're trustworthy, etc?
    – user173641
    Commented Jun 21, 2018 at 15:52
  • 96
    If I wanted to steal another employee’s credentials to, say, snoop through confidential company data, sabotage employees I don’t like, or cryptojack our computers in a way that someone else takes the fall, sniffing logins to an http intranet would be a good way to go about it, dontcha think? Commented Jun 21, 2018 at 22:44
  • 14
    What's your threat model? Employees attacking the company, the company attacking the employees, employees attacking each other, third parties attacking the employees, third parties attacking an employee and pivoting into an attack on the company, ...? It's hard to evaluate the cost-benefit of a security measure without knowing what you want to defend against. Commented Jun 22, 2018 at 2:38
  • 57
    I must admit the guilt of a little trolling excursion. I have spoken on behalf of the organization while I am the guy complaining. Your amazing reactions may help convince the IT department to do something :D Thanks everyone! Commented Jun 22, 2018 at 12:13
  • 8
    Note that for US government agencies, internal encryption of all traffic is generally mandatory, and likewise with government contractors. The highest profile breaches of the last ten years have all been insider threats. Commented Jun 22, 2018 at 20:06