1. 37
    Kazakhistan to MITM all SSL traffic security telecom.kz
    mperham avatar via mperham 7 years ago |
    Archive.org Archive.today Ghostarchive
    | 4 comments
    1. 13
      listrophy avatar listrophy 7 years ago | link

      This is not a good precedent.

    2. 12
      itistoday avatar itistoday edited 7 years ago | link

      OK, several reasons why this is not as scary as you might think:

      • USA (and many other countries) can already do this to the entire world.
      • Metadata about what sites you visit over HTTPS is already sent in the clear because of SNI and DNS (and incidentally, IP as well).
      • The situation is actually about as bad as it can be already, where multiple countries, not just the United States and Kazakhstan, can MITM Kazakhstani traffic (and other traffic).
      • Similar to the Dell root debacle, at some point some hacker will get their hands on a CA’s cert, whether it be VeriSign or Kazakhstan Central, and they will also have the power to MITM all your HTTPS traffic. If they are generous like Dell, they’ll give that power to everyone else as well.

      So, people really shouldn’t be all that worried about this situation (as opposed to being worried about our current one) simply because it’s nothing new. We’re already f*cked.

    3. 5
      fkooman avatar fkooman 7 years ago | link

      They basically get the same ability as the NSA/GHCQ, but don’t need programs like PRISM to get to the data. [/cynicism]

    4. 3
      mjtorn avatar mjtorn 7 years ago | link

      The link gives 404 and I couldn’t find anything clear about this on the page, so I dug up an Archive link

      http://web.archive.org/web/20151202203337/http://telecom.kz/en/news/view/18729