> You should remove these CAs Or they might fire you. IMO, you want to stay under the radar of your IT department. Much better if you can to let them have their MiTM certs and go around them using SSH or some other protocol.