What I know: - My company uses a proxy to "inject"(not sure a better term) their own SSL certs into my traffic so they can decrypt https traffic. This is evidenced by the Chrome cert button that shows the issuer name, in some cases it is (my.company.com) So there is that. - We are also on a company vpn.

How the issue arises: - When I try to pip install a new dependency my company issues their cert, which makes the download fail. - Additionally, when I try to connect to maven.org and clojars.org, the cert issue also arises. - At this point I know I can manually download and build dependencies, but I'm just curious at this point.

The confusing: - I have a company phone, with personal hotspot, and a personal vpn installed(not a company vpn) - If I connect my laptop to my hotspot, and turn on my personal VPN, my laptop shows the sites that were originally being intercepted, as not being intercepted. For instance clojure.org use to show(my.company.com) as the cert issuer. Now it shows Amazon. Cool, so I'm not being blocked anymore. - However, I go back to the terminal to install the dependencies with leiningen, and it says "Cannot transfer artifacts from clojars.org and maven.org": my.company.com - I have confirmed that the VPNed certs to both of those urls are no longer intercepted with my hotspot. - So, somehow my company is still able to mess with the downloads.

Any ideas why?