Re:Russia 'successfully tests' its unplugged internet
by sandworm101 on Tuesday December 24, 2019 @11:01PM
(#21876708)
It was almost certainly a test of a local root zone, a Russian-controlled DNS scheme capable of standing in for the real system. This could be tested without literally disconnecting and wouldn't be very difficult with the cooperation of local isps. But it probably broke https.
[ Parent
| on HN ]
Re:Russia 'successfully tests' its unplugged internet
by branzo on Wednesday December 25, 2019 @01:44AM
(#21877268)
If u have a state-owned, state-run DNS service with a root zone and cooperation (forced or not) from ISPs, you really would not have to care about https, and if CT services are not reachable nobody would know.
Re:Russia 'successfully tests' its unplugged internet
by antpls on Wednesday December 25, 2019 @03:06AM
(#21877525)
How would that work ?
Aren't there private and public keys involved ? Public keys are pre-packaged with clients (Firefox/Chrome/etc), so the state can't just change or fake the private keys.
Maybe they would force all clients to prepackage a government key and then change all infrastructure to pretend all websites use this public key for their https traffic?