#dev 2021-05-10

2021-05-10 UTC

aaronpk yes, on devices managed by a company, the IT department can push custom root certs to the machine, then they can sign a cert for any domain that the computer will trust. this happens all the time, and the end user won't even be aware of it