News for hackers. Stuff that matters.

A comment on Kazakhstan to MitM all HTTPS traffic starting Jan 1. Parent comment

Re:Kazakhstan to MitM all HTTPS traffic starting Jan 1 by mil0 on Wednesday December 02, 2015 @08:33PM (#10667151)
How would the telco get their Private Trust Anchor into the certificate store ? More social engineering, i suppose. At the app level though, a chain resolution like what you describe is not required.
[ Parent | on HN ]
Re:Kazakhstan to MitM all HTTPS traffic starting Jan 1 by nathan_f77 on Thursday December 03, 2015 @02:27AM (#10668289)
They will be telling citizens to install a "national security certificate". After they implement this, you won't be able to access the internet without it.
[ Parent | on HN ]
Re:Kazakhstan to MitM all HTTPS traffic starting Jan 1 by maaku on Wednesday December 02, 2015 @08:39PM (#10667177)
I'll give you a hint: they run customs.
[ Parent | on HN ]
Re:Kazakhstan to MitM all HTTPS traffic starting Jan 1 by blazespin on Wednesday December 02, 2015 @09:11PM (#10667284)
Wuh? Why not just ask the user to insert the cert?
[ Parent | on HN ]
Re:Kazakhstan to MitM all HTTPS traffic starting Jan 1 by therein on Wednesday December 02, 2015 @10:30PM (#10667563)
They COULD do that but they almost certainly aren't doing that. That's a tedious task that requires a lot of time and technically competent employees.

Also we are talking about apps implementing certificate pinning. Not reading from the OS store etc., and therefore, I don't see Kazakhstan reverse engineering and patching executables.

[ Parent | on HN ]