Re:MITM on HTTPS traffic in Kazakhstan
by mdhardeman on Thursday July 18, 2019 @06:01PM
(#20474342)
That's fair, but the country doing this will just fork an open-source browser and make it their official browser.
[ Parent
| on HN ]
Sure. "don't use Kazakhfox, it's malware, we've submitted definitions to the AV databases" isn't a hard sell for your 99%+ audience.
Malware forks of open source projects (and closed-source software!) are not a new problem.
Re:MITM on HTTPS traffic in Kazakhstan
by mdhardeman on Thursday July 18, 2019 @06:55PM
(#20474753)
Except they are a new problem when the use of them is mandated by a nation-state.
Which is bad news for the ~15m internet users in Kazakhstan. For the ~4000m internet users not in Kazakhstan & generally immune to their rubber hose attack, protecting them from being one BGP fuckup away from being MITMed by a hostile foreign power is much more important.
Re:MITM on HTTPS traffic in Kazakhstan
by mdhardeman on Thursday July 18, 2019 @07:45PM
(#20475066)
Totally separate problem that I agree needs to be fixed.
In reality, being one BGP trick away from a mere dedicated individual or corporate owning certs for your domain is an actual risk today.