John Rumm wrote:

T i m wrote:

Getting the computer "online" at the school often means installing the
school spyware and a certificate for their proxy server so that they
can inspect all the encrypted traffic.

That should ring alarm bells on any modern web browser - the site
certificates would no longer match.

Get the domain controller to push out the root CA certificate that the
proxy fakes the website certificates from ... I hate doing it, but
nobody seems to like my suggestion not to MITM their users online
banking any more :-(