I have been using a BlackBerry for work for about two years or so. I paid for the BlackBerry myself and I also pay for the service (i.e., my employer contributes nothing toward the monthly bill). My employer has a BlackBerry Enterprise Server through which I can receive work emails and sync my work calendar.
I recently discovered that all Web browsing on the device (through the Web browser on the BlackBerry) is routed through my employer’s BlackBerry Enterprise Server. This is not a big deal except that I also access my personal email using the device (there is no company policy prohibiting this and I own the device/pay for the data). The mobile version of Gmail is an SSL site, so I’m curious–can the IT guys read my personal email, assuming that the session itself is secure? Assume a standard BlackBerry Enterprise Server and no weird stuff (keystroke loggers, etc.).