Re:Thousands of Russians protest against internet restrictions
by lambdadmitry on Monday March 11, 2019 @05:37AM
(#19357709)
I bet the next thing Russian (and many other oppressive ones) will try is forcing government-issued root certs on client devices with mandatory mitm. Sure, some devices might not be capable of importing new root certs, but for sufficiently dictatorial regime it's not a problem.
[ Parent
| on HN ]
Re:Thousands of Russians protest against internet restrictions
by ignoramous on Monday March 11, 2019 @03:29PM
(#19362008)
Strict CertifcatePinning can thankfully prevent this from working [0] as intended, although on the flip-side it also introduces a significant problem for deep-packet inspection for malware/intrusion detection and privacy enthusiasts who would like to re-map certain kinds of traffic on the client-side [1].