Ehh.. no? TLS protects the data against snooping, but only borders protect you from warrants. Russia based servers are subject to Russian law and warrants.

I see that the tacit assumption in this thread is that the FSB can't defeat simple consumer encryption.

The certificates in Russian citizens' browsers allow the Russian government to intercept their communications. This is just one of hundreds of weaknesses to that belief.

There are no government certs in Russian citizens' browsers at the moment. Furthermore, government mandated hardware, that ISPs have to install, is not installed in a configuration permitting any kind of MITM, it only sees mirrored traffic.

And while you are at it you could also tell us how this regulation

> make it more difficult for the US to spy on Russian citizens

???

> everbody wants to know now how those certificates are included in Russian citizens browsers.

Included in the builds.

> And while you are at it you could also tell us how this regulation make it more difficult for the US to spy on Russian citizens

The traffic will stay inside of infrastructure controlled by the Russian government through its domestic ISPs, rather than exiting the country to ingestion nodes disclosed by Snowden to be used to surveil on internet traffic.

Russian citizens download and install specially crafted builds instead of the officials ones? Are they forced, or do they they trust those FSB builds more?

> The traffic will stay inside of infrastructure controlled by the Russian government through its domestic ISPs, rather than exiting the country.

I guess we are not talking about the same, because the the regulation doesn't dictate this. It "just" says, that there has to be a copy of the data in Russia. The server can still be outside of Russia.

This whole conversation is just not going anywhere. The Russian government can't snoop your tls data if it leaves the country, end of story. That's the reason for this law and the article to begin with!

You aren't claiming that they couldn't compromise a CA, are you? That's pretty much the only thing that would make such an assumption unreasonable.

If this were true, I would feel very comfortable speaking about politics in Russia, as in the United States all consumer-grade encryption is being broken by our intelligence services.

There have been some attempts by the ISPs to enable MITM, but it's very crude - they basically block SSL, except for their own custom root certificate that they explicitly require you to install, and then they use that to MITM you. It's all very blatant, and I think there was only one ISP actually trying to do it.

Also, I'm not aware of any cases of dissenters caught because their encryption was broken. Most people who get persecuted for their views said all the things they did out in the open, either to make a stand, or because they were careless.