body: Does a company have the right to sniff all the traffic on their network irrespective of whether it contains personal data of employees if they show a warning message which states "...are subject to having their activities on the system intercepted, monitored and recorded."
  
  
  1. Does US law states anything about this?
  2. Does company policy enforcement with such a warning override the right to not be subject to surveillance?
  
  
  
title: Does a company have the right to perform MITM SSL stripping attack on their employees?