[dooglius]

Sounds like it is working perfectly, you want a MITM and this is making that difficult.

[nykolasz]

Quite the opposite. We don't want MITM and this may force that direction.

[dooglius]

Poor choice of term maybe... you want to get information about communication between endpoints without their consent.

[captncraig]

Well its a school. They (or their legal guardians) consent as a condition of using the network.

[CydeWeys]

It sounds like they have root access on the computers in question. There's plenty of options thus available to them.

[Tushon]

The OP talked about BYOB, which rarely includes "root access" (either via a root cert for decrypting traffic or admin level access to the machine)..

[CydeWeys]

I was referring to the machines they were preventing the installation of Firefox on.

For BYOD, I don't know what you're gonna do. Many students have smartphones too (some with tethering), and you can't control what they look at on those either. Plus, even if the school could somehow magically lock everything down 100% within the confines of the school building, the students can still get access to whatever at home, or using coffeeshop WiFi, or whatever.

[zAy0LfpBZLC8mAC]

... where using the network is required for participating in school? That would be an interesting notion of consent.