Skip to main content
September 29, 2021
Question

zScaler, man in the middle

  • September 29, 2021
  • 3 replies
  • 707 views

Hello,

my company is rolling out zScaler which is a cloud based "Firewall" that also opens up tls connections by issuing a *.1password.eu/com/ca intermediate certificate.

My question are:
1. Will the 1Password for windows and the browser plugin still work? (Or is the certificate replacement detected?)
2. Are my data still safe?

Best regards,

Oliver


1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided

3 replies

September 30, 2021

Oliver,

1Password 7 for Windows and the browser plugin should continue to work even with the TLS person-in-the-middle that is being done by zScaler. 1Password 8 for Windows will not work at this time.

1Password uses two layers of encryption for your data so our E2E encryption is not dependent on TLS. The second layer of encryption is built on your Master Password and Secret Key, which only you posses. If you would like to learn more about our E2E encryption or potential attacks by a person-in-the-middle, please take a look at the https://1password.com/files/1Password-White-Paper.pdf. In particular, read the Transport Security and Crypto over HTTPS sections of the paper.

Thanks,
Stephen

October 8, 2021

@shaywood , Is there a timeline for when 1Password 8 for Windows will work with zScaler? Curiously the setup and sync seemed to work fine with 8 but then it stopped syncing. zScaler was running both times but if I disable zScaler it will sync correctly.

Thanks
Joshua

October 10, 2021

Hey Joshua,

We don't have an ETA or a timeline to share regarding support for this feature. It is best to stick to 1Password 7 for now.