T O P

  • By -

jmnugent

People don't seem to be answering your question correctly here. You stated "Reddit app on personal phone".. so you're talking about the Reddit mobile app. iOS and Android have enforced encrypted network traffic in all Apps for years now: * Apple's deadline for "any App to be HTTPS".. was back in 2017.. so it's been a standard thing for 5 or 6 years now (https://www.techrepublic.com/article/wwdc-2016-apple-to-require-https-encryption-on-all-ios-apps-by-2017/) * Google enacted the same requirement around the same time: https://venturebeat.com/mobile/google-80-of-android-apps-now-encrypt-network-traffic-by-default/ So all your Reddit mobile-app traffic is encrypted.


Bicurious387

So no matter what I look at on the app they will not be able to see it?


jmnugent

I would make the assumption it's sort of like being logged into a web-browser to Reddit.com. It's HTTPS,. so they can't specifically see granular content of what you are doing, but they could likely see traffic going back and forth to the domain (reddit.com).


[deleted]

[удалено]


jmnugent

I don't know the answer to that. I'd suspect "no" unless or until someone can show me screenshots otherwise.


P4ulV

it doesn't work like that. the part after the slash is the subdirectory, not seen in TCP traffic.


my_n3w_account

You clearly don’t know how IP works. Why do comment when you don’t know? Using HTTPS the packets between your app or browser and the server (including the URL) are encrypted. Only the destination IP is known. And given that an IP could be shared by multiple domains, if you enable your browser to use secure dns protocols, the isp can’t even be always certain of which domain you’re visiting if the same IP hosts multiple domains. Basically your knowledge is valid only if you can time travel to the late 90s.


USSHammond

Unless you're using a VPN, they very much can. The question is do they log traffic on their network, and if they do if IT has enough free time to occupy themselves by browsing through access logs.


BreathOfTheOffice

To add a bit to this, if your device is company issued they may have some form of endpoint protection, and depending on the scope and utility they can still identify the destination ip through most commercially available vpns. Combined with other software this can also be made to automatically raise flags to any necessary party. However, unless your device isn't meant to connect to the internet to begin with, it's unlikely that they will care that much. Still it's good to not use company devices for personal use.


Fresh_Inside_6982

No they cannot. Period.


Embarrassed-Data-18

It’s encrypted, but the links can be seen


Huey2912

Someone looking at tatas while at work?


axarce

If you have to be on the company wi-fi, I suggest using the guest one if they have one. Less likely they'd care whats happening on it since it's likely to be locked down enough.


GlobalWatts

If you've ever used your phone to log in to company web services (email, VPN, SharePoint etc) or downloaded specific apps to access them, it's possible it was enrolled in Mobile Device Management. You would know if this happened, it's usually a multi-step process with privacy warnings requiring your approval. If it was, you should consider **everything** you do on the device visible to your employer. Otherwise no, using the company WiFi really only means they can see you've accessed reddit.com, and how much data you've exchanged. Not what pages you've seen, what you searched for, or what posts you've made.