{"id":36304,"date":"2019-10-31T22:10:50","date_gmt":"2019-10-31T19:10:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika\/"},"modified":"2019-10-31T22:10:50","modified_gmt":"2019-10-31T19:10:50","slug":"v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","title":{"rendered":"In Kazakhstan, several major providers have implemented HTTPS traffic interception.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

In accordance with the amendments effective in Kazakhstan since 2016, amendments<\/a><\/noindex> To the law 'On Communications', many Kazakh providers, including Kcell<\/a><\/noindex>,
\nBeeline<\/a><\/noindex>, Tele2<\/a><\/noindex> and Altel<\/a><\/noindex>, as of today have launched<\/a><\/noindex> systems for intercepting clients' HTTPS traffic by replacing the originally used certificate. The interception system was initially planned to be implemented in 2016, but this operation has been continuously postponed, and the law has become seen as more formal than functional. The interception is carried out under the guise of<\/a><\/noindex> concern for user security and the desire to protect them from threatening content.<\/p>\n

To disable browser warnings about the use of an incorrect certificate, users are required<\/a><\/noindex> install 'national security certificate<\/a><\/noindex>', which is applied when transmitting secure traffic to foreign websites (for example, interception of traffic to Facebook is already being recorded).<\/p>\n

When establishing a TLS connection, the actual certificate of the target site is replaced by a newly generated certificate created on-the-fly, which will be marked as valid by the browser if the 'national security certificate' has been added by the user to the root certificate store, as the substitute certificate is linked in a chain of trust with the 'national security certificate.' <\/p>\n

Essentially, in Kazakhstan, the protection provided by the HTTPS protocol is completely compromised, and all HTTPS requests in terms of the possibility of traffic monitoring and interception by security services are hardly different from HTTP. It is impossible to control abuses in such a scheme, including when the encryption keys related to the 'national security certificate' fall into the wrong hands due to leaks.<\/p>\n

Browser developers are considering<\/a><\/noindex> proposal<\/a><\/noindex> must add the root certificate used for interception to the list of revoked certificates (OneCRL), as Mozilla recently has done.<\/a><\/noindex> with certificates from the DarkMatter certification authority. However, the purpose of such an operation is not entirely clear (it was deemed pointless in previous discussions), as in the case of the 'national security certificate', this certificate is initially not covered by chains of trust and browsers already display a warning without the user's certificate installation. On the other hand, the lack of response from browser manufacturers may encourage the implementation of similar systems in other countries. As an option, it is also proposed to implement a new indicator for locally installed certificates implicated in MITM attacks.<\/p>\n

<\/a><\/noindex><\/p>\n

Source: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u0432 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0441 2016 \u0433\u043e\u0434\u0430 \u043f\u043e\u043f\u0440\u0430\u0432\u043a\u0430\u043c\u0438 \u043a \u0437\u0430\u043a\u043e\u043d\u0443 «\u041e \u0441\u0432\u044f\u0437\u0438», \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u0430\u0437\u0430\u0445\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Kcell, Beeline, Tele2 \u0438 Altel, \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f \u0432\u0432\u0435\u043b\u0438 \u0432 \u0441\u0442\u0440\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441 \u043f\u043e\u0434\u043c\u0435\u043d\u043e\u0439 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432 2016 \u0433\u043e\u0434\u0443, \u043d\u043e \u044d\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u043b\u0430\u0441\u044c \u0438 \u0437\u0430\u043a\u043e\u043d \u0443\u0436\u0435 \u0441\u0442\u0430\u043b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36304","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47In Kazakhstan, a number of large providers have implemented HTTPS traffic interception | ProHoster","description":"In accordance with the amendments to the law 'On Communication' effective in Kazakhstan since 2016, many Kazakhstani providers.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/news\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0440\u044f\u0434 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0432\u043d\u0435\u0434\u0440\u0438\u043b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 | ProHoster","og:description":"\u0412 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u0432 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0441 2016 \u0433\u043e\u0434\u0430 \u043f\u043e\u043f\u0440\u0430\u0432\u043a\u0430\u043c\u0438 \u043a \u0437\u0430\u043a\u043e\u043d\u0443 \u00ab\u041e \u0441\u0432\u044f\u0437\u0438\u00bb, \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u0430\u0437\u0430\u0445\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b.","og:url":"https:\/\/prohoster.info\/en\/blog\/news\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:10:50+00:00","article:modified_time":"2019-10-31T19:10:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36304","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 02:48:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:47:34","updated":"2026-01-22 02:48:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/36304","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=36304"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/36304\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=36304"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=36304"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=36304"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}