On: Addressing Visibility Challenges with TLS 1.3 Within the Enterprise

[ngrilly]

> Can't enterprises just MITM the traffic and sign it with a CA the clients trust?

This is what Zscaler is doing. I know because my company was (unfortunately) using this.

[Avamander → ngrilly]

> ZScaler

Awful company with 0 protections against being abused. They can't handle stopping a DDoS originating from their service I can't imagine them being trustworthy for a full MiTM.