[codeka]

This is far more common than you might expect. You just need to push you're company's internal CA to all your client computers, and bam, MITM for everything!

[rondon1]

Yes enterprise customers want to decrypt and inspect all traffic, for legitimate and sometimes sketchy reasons.

[rurounijones]

HIPAA requires it as far as I know, and I am sure other regulatory frameworks probably do.

[tptacek]

HIPAA does not require traffic monitoring.