Masu amfani da tashar sabis na gwamnati na Tarayyar Rasha (gosuslugi.ru) sun sami sanarwa game da ƙirƙirar cibiyar ba da takardar shaida ta jihar tare da tushen takardar shaidar TLS, wanda ba a haɗa shi cikin tushen takaddun shaida na tsarin aiki da manyan masu bincike ba. Ana ba da takaddun shaida bisa son rai ga ƙungiyoyin doka kuma ana nufin amfani da su a cikin yanayin sokewa ko ƙarewar sabunta takaddun shaida na TLS sakamakon takunkumi. Misali, hukumomin ba da takaddun shaida a ƙarƙashin ikon Amurka, kamar DigiCert, sun daina ba da takaddun shaida ga rukunin yanar gizon ƙungiyoyin da ke cikin jerin takunkumi.
A halin yanzu, an haɗa takardar shaidar tushen jihar kawai cikin samfuran Yandex.Browser da Atom. Don tabbatar da dogaro ga wasu masu bincike don rukunin yanar gizon da ke amfani da takaddun shaida daga hukumar ba da takaddun shaida na gwamnati, dole ne ka ƙara tushen takardar shaidar da hannu zuwa tsarin ko kantin sayar da takaddun burauza.
Daga cikin rukunin yanar gizon da suka riga sun karɓi takaddun TLS na gwamnati akwai bankuna daban-daban (Sberbank, VTB, Babban Bankin) da ƙungiyoyi da ayyukan da ke da alaƙa da hukumomin gwamnati. A lokaci guda, a lokacin rubuta labarai, manyan gidajen yanar gizo na Sberbank da VTB suna ci gaba da yin amfani da takaddun shaida na TLS na gargajiya, waɗanda ke goyan bayan duk masu bincike, amma kowane yanki (misali, online-alpha.vtb.ru) sun riga sun kasance. canjawa wuri zuwa sabon takardar shaidar.
Idan aka fara sanya sabon CA, ko kuma aka gano cin zarafi kamar hare-haren MITM, da alama masu siyar da masu binciken Firefox, Chrome, Edge da Safari za su ɗauki mataki don ƙara takaddun tushen matsala a cikin jerin soke takaddun shaida, kamar yadda sun riga sun yi tare da takardar shaidar, an aiwatar da su don hana zirga-zirgar HTTPS a Kazakhstan.
source: budenet.ru