logoalt Hacker News

p2detaryesterday at 4:53 PM2 repliesview on HN

An MDM orga cannot install a trusted CA on non-supervised (company owned) devices. By default on BYOD these are untrusted and require manual trust. It also cannot see everything on your device - certainly not your email, notes or files, or app data.


Replies

somebudyelseyesterday at 5:37 PM

As someone who has an MDM-managed device, I beg to differ. Although, this one uses newer style android MDM, which involves factory resetting and doing special things during OOBE. Even if it used the older style, nothing's stopping the app for requesting file access, notification access, etc. and not working until you grant the permissions.

show 1 reply
layer8yesterday at 7:25 PM

If it is untrusted, you also won’t have a TLS connection be established based on that CA.