{"id":36304,"date":"2019-10-31T22:10:50","date_gmt":"2019-10-31T19:10:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika\/"},"modified":"2019-10-31T22:10:50","modified_gmt":"2019-10-31T19:10:50","slug":"v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","title":{"rendered":"Au Kazakhstan, plusieurs grands fournisseurs ont mis en place un syst\u00e8me d'interception du trafic HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Conform\u00e9ment aux amendements en vigueur au Kazakhstan depuis 2016 modifications<\/a><\/noindex> Selon la loi \u00ab Sur les communications \u00bb, de nombreux fournisseurs kazakhs, y compris Kcell<\/a><\/noindex>,
\nBeeline<\/a><\/noindex>, Tele2<\/a><\/noindex> et Altel<\/a><\/noindex>, \u00e0 partir d'aujourd'hui ont mis en place<\/a><\/noindex> des syst\u00e8mes d'interception du trafic HTTPS des clients en rempla\u00e7ant le certificat initialement utilis\u00e9. \u00c0 l'origine, le syst\u00e8me d'interception devait \u00eatre mis en \u0153uvre en 2016, mais cette op\u00e9ration a \u00e9t\u00e9 constamment report\u00e9e et la loi est d\u00e9j\u00e0 per\u00e7ue comme formelle. L'interception se fait sous couvert de<\/a><\/noindex> prendre soin de la s\u00e9curit\u00e9 des utilisateurs et de vouloir les prot\u00e9ger du contenu mena\u00e7ant.<\/p>\n

Pour d\u00e9sactiver l'affichage dans les navigateurs d'un avertissement sur l'utilisation d'un certificat incorrect, les utilisateurs sont tenus<\/a><\/noindex> ont install\u00e9 sur leurs syst\u00e8mes \u00abcertificat national de s\u00e9curit\u00e9<\/a><\/noindex>\u00bb, utilis\u00e9 pour la diffusion de trafic s\u00e9curis\u00e9 vers des sites \u00e9trangers (par exemple, une substitution de trafic vers Facebook est d\u00e9j\u00e0 observ\u00e9e).<\/p>\n

Lors de l'\u00e9tablissement d'une connexion TLS, le certificat r\u00e9el du site cible est remplac\u00e9 par un nouveau certificat g\u00e9n\u00e9r\u00e9 \u00e0 la vol\u00e9e, qui sera marqu\u00e9 par le navigateur comme \u00e9tant valide si le \u00ab certificat de s\u00e9curit\u00e9 national \u00bb a \u00e9t\u00e9 ajout\u00e9 par l'utilisateur dans le magasin des certificats racines, car le certificat de substitution est li\u00e9 par une cha\u00eene de confiance au \u00ab certificat de s\u00e9curit\u00e9 national \u00bb. <\/p>\n

En fait, la protection fournie par le protocole HTTPS est compl\u00e8tement compromise au Kazakhstan, et toutes les requ\u00eates HTTPS, en termes de possibilit\u00e9 de suivi et de substitution de trafic par les services sp\u00e9ciaux, ne diff\u00e8rent gu\u00e8re des requ\u00eates HTTP. Il est impossible de contr\u00f4ler les abus dans un tel sch\u00e9ma, notamment en cas de compromission des cl\u00e9s de chiffrement li\u00e9es au \u00ab certificat de s\u00e9curit\u00e9 national \u00bb par un tiers \u00e0 la suite d'une fuite.<\/p>\n

Les d\u00e9veloppeurs de navigateurs envisagent<\/a><\/noindex> proposition<\/a><\/noindex> ajouter le certificat racine utilis\u00e9 pour l'interception \u00e0 la liste des certificats r\u00e9voqu\u00e9s (OneCRL), comme l'a r\u00e9cemment fait Mozilla agissant ainsi.<\/a><\/noindex> avec les certificats de l'autorit\u00e9 de certification DarkMatter. Mais le sens d'une telle op\u00e9ration n'est pas tr\u00e8s clair (dans des discussions pr\u00e9c\u00e9dentes, elle a \u00e9t\u00e9 jug\u00e9e inutile), car dans le cas du \u00ab certificat de s\u00e9curit\u00e9 national \u00bb, ce certificat n'est pas initialement couvert par des cha\u00eenes de confiance et sans l'installation du certificat par l'utilisateur, les navigateurs affichent d\u00e9j\u00e0 un avertissement. D'un autre c\u00f4t\u00e9, l'absence de r\u00e9action de la part des fabricants de navigateurs pourrait inciter \u00e0 l'impl\u00e9mentation de syst\u00e8mes similaires dans d'autres pays. Une option propos\u00e9e serait \u00e9galement de mettre en place un nouvel indicateur pour les certificats install\u00e9s localement, impliqu\u00e9s dans des attaques MITM.<\/p>\n

<\/a><\/noindex><\/p>\n

Source : opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u0432 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0441 2016 \u0433\u043e\u0434\u0430 \u043f\u043e\u043f\u0440\u0430\u0432\u043a\u0430\u043c\u0438 \u043a \u0437\u0430\u043a\u043e\u043d\u0443 «\u041e \u0441\u0432\u044f\u0437\u0438», \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u0430\u0437\u0430\u0445\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Kcell, Beeline, Tele2 \u0438 Altel, \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f \u0432\u0432\u0435\u043b\u0438 \u0432 \u0441\u0442\u0440\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441 \u043f\u043e\u0434\u043c\u0435\u043d\u043e\u0439 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432 2016 \u0433\u043e\u0434\u0443, \u043d\u043e \u044d\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u043b\u0430\u0441\u044c \u0438 \u0437\u0430\u043a\u043e\u043d \u0443\u0436\u0435 \u0441\u0442\u0430\u043b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36304","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Au Kazakhstan, plusieurs grands fournisseurs ont mis en \u0153uvre l'interception du trafic HTTPS | ProHoster","description":"Selon les modifications apport\u00e9es \u00e0 la loi \u00ab Sur les communications \u00bb en vigueur au Kazakhstan depuis 2016, de nombreux fournisseurs kazakhs.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0440\u044f\u0434 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0432\u043d\u0435\u0434\u0440\u0438\u043b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 | ProHoster","og:description":"\u0412 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u0432 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0441 2016 \u0433\u043e\u0434\u0430 \u043f\u043e\u043f\u0440\u0430\u0432\u043a\u0430\u043c\u0438 \u043a \u0437\u0430\u043a\u043e\u043d\u0443 \u00ab\u041e \u0441\u0432\u044f\u0437\u0438\u00bb, \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u0430\u0437\u0430\u0445\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:10:50+00:00","article:modified_time":"2019-10-31T19:10:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36304","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 02:48:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:47:34","updated":"2026-01-22 02:48:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/36304","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=36304"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/36304\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=36304"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=36304"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=36304"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}