MITM certainly can see everything, and employers do it: http://it.slashdot.org/story/14/03/05/1724237/ask-slashdot-d...