News for hackers. Stuff that matters.

A comment on Kazakhstan to MitM all HTTPS traffic starting Jan 1. Parent comment

Re:Kazakhstan to MitM all HTTPS traffic starting Jan 1 by maaku on Wednesday December 02, 2015 @08:39PM (#10667177)
I'll give you a hint: they run customs.
[ Parent | on HN ]
Re:Kazakhstan to MitM all HTTPS traffic starting Jan 1 by blazespin on Wednesday December 02, 2015 @09:11PM (#10667284)
Wuh? Why not just ask the user to insert the cert?
[ Parent | on HN ]
Re:Kazakhstan to MitM all HTTPS traffic starting Jan 1 by therein on Wednesday December 02, 2015 @10:30PM (#10667563)
They COULD do that but they almost certainly aren't doing that. That's a tedious task that requires a lot of time and technically competent employees.

Also we are talking about apps implementing certificate pinning. Not reading from the OS store etc., and therefore, I don't see Kazakhstan reverse engineering and patching executables.

[ Parent | on HN ]