0

I have a small home server still running WHSv1 (and yes, I know Windows Server 2003 is no longer supported). Website is resisted through 'Windows Live Custom Domains'.

When I go to the website from my house, I see the certificate is being issued by 'Go Daddy Secure Certificate Authority - G2'. Certificate 1 But when I view the site from my work, it see its issued by 'Websense Certificate Authority'.Certificate 2

Why does the Issuer appear to be different based on what computer I'm looking at the website from?

  • Differences in browser is what? – Ramhound Jul 31 '16 at 18:54
2

Your employer is using ssl proxy termination (also known as man-in-the-middle) to decrypt the web traffic and inspecting it before it leaves the network.

This is widely used by larger companies to control Web site usage based on the content (content filtering)

  • Thanks. I knew was behind a proxy at work... But not the extent of what it was doing. – Arges86 Aug 1 '16 at 3:40
1

Based on the certification information. Your work is issuing you their own certificate to your website. This means they can intercept, record, and view all traffic between the PC at work and your website.

This is supported by my Bing search on Websense:

Forcepoint, previously known as Websense and Raytheon|Websense

Which matches your certificate:

enter image description here

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.