BlackBerry Enterprise Server - Security Question

[HighOctaneMoron]

I have been using a BlackBerry for work for a couple of years now. I paid for the BlackBerry myself and I also pay the monthly bill. My employer has a BlackBerry Enterprise Server through which I can receive work emails and sync my work calendar.

I discovered that all Web browsing on the device (i.e., through the Web browser on the BlackBerry) is routed through the company's BlackBerry Enterprise Server. This is not a big deal except that I also access my personal email using the device. there is no company policy prohibiting this (plus I own the device/pay the bill). The mobile version of Gmail is an SSL site, so I'm curious--can the IT guys read my personal email, assuming that the session itself is secure? Assume a standard BlackBerry Enterprise Server and no exotic/weird stuff (keystroke loggers, etc.).

 

[webdave]

Not if you are accessing via SSL. They will be able to track the addresses you are hitting but not the encrypted content. It would be the same as if you were accessing the site on their network on a laptop.