{"id":36304,"date":"2019-10-31T22:10:50","date_gmt":"2019-10-31T19:10:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika\/"},"modified":"2019-10-31T22:10:50","modified_gmt":"2019-10-31T19:10:50","slug":"v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","title":{"rendered":"W Kazachstanie kilku du\u017cych dostawc\u00f3w wprowadzi\u0142o przechwytywanie ruchu HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Zgodnie z obowi\u0105zuj\u0105cymi w Kazachstanie od 2016 roku poprawkami<\/a><\/noindex> Zgodnie z ustaw\u0105 \u201eO \u0142\u0105czno\u015bci\u201d, wielu kazachsta\u0144skich dostawc\u00f3w, w tym Kcell<\/a><\/noindex>,
\nBeeline<\/a><\/noindex>, Tele2<\/a><\/noindex> i Altel<\/a><\/noindex>, od dzisiaj wdro\u017cyli<\/a><\/noindex> systemy przechwytywania ruchu HTTPS klient\u00f3w z podmian\u0105 pierwotnie u\u017cywanego certyfikatu. Wdro\u017cenie systemu przechwytywania planowano pocz\u0105tkowo na 2016 rok, jednak ta operacja by\u0142a nieustannie odk\u0142adana, a ustawa zacz\u0119\u0142a by\u0107 postrzegana jako formalna. Przechwytywanie odbywa si\u0119 pod pretekstem<\/a><\/noindex> troski o bezpiecze\u0144stwo u\u017cytkownik\u00f3w i ch\u0119ci ochrony ich przed zagra\u017caj\u0105c\u0105 tre\u015bci\u0105.<\/p>\n

Aby wy\u0142\u0105czy\u0107 ostrze\u017cenia w przegl\u0105darkach dotycz\u0105ce stosowania nieprawid\u0142owego certyfikatu, u\u017cytkownicy s\u0105 zobligowani<\/a><\/noindex> musz\u0105 zainstalowa\u0107 w swoich systemach \u201ekrajowy certyfikat bezpiecze\u0144stwa<\/a><\/noindex>\u201e, kt\u00f3ry jest stosowany do transmisji chronionego ruchu do zagranicznych stron internetowych (na przyk\u0142ad, ju\u017c odnotowano podmian\u0119 ruchu do Facebooka).<\/p>\n

Podczas nawi\u0105zywania po\u0142\u0105czenia TLS rzeczywisty certyfikat docelowej strony jest zamieniany na nowo wygenerowany certyfikat, kt\u00f3ry b\u0119dzie oznaczony przez przegl\u0105dark\u0119 jako zaufany, je\u015bli \u201ekrajowy certyfikat bezpiecze\u0144stwa\u201d zosta\u0142 dodany przez u\u017cytkownika do magazynu certyfikat\u00f3w g\u0142\u00f3wnych, poniewa\u017c podstawowy certyfikat jest powi\u0105zany zaufan\u0105 \u015bcie\u017ck\u0105 z \u201ekrajowym certyfikatem bezpiecze\u0144stwa\u201d. <\/p>\n

W praktyce w Kazachstanie ca\u0142kowicie skompromitowana jest ochrona zapewniana przez protok\u00f3\u0142 HTTPS, a wszystkie zapytania HTTPS w kontek\u015bcie mo\u017cliwo\u015bci \u015bledzenia i podmiany ruchu przez s\u0142u\u017cby specjalne s\u0105 niewiele r\u00f3\u017cne od HTTP. Kontrola nadu\u017cy\u0107 w takim schemacie jest niemo\u017cliwa, w tym w przypadku, gdy klucze szyfrowania zwi\u0105zane z \u201ekrajowym certyfikatem bezpiecze\u0144stwa\u201d dostan\u0105 si\u0119 w inne r\u0119ce w wyniku wycieku.<\/p>\n

Deweloperzy przegl\u0105darek rozwa\u017ca<\/a><\/noindex> propozycja<\/a><\/noindex> doda\u0107 wykorzystywany do przechwytywania certyfikat g\u0142\u00f3wny do listy certyfikat\u00f3w uniewa\u017cnionych (OneCRL), jak niedawno zrobi\u0142a Mozilla wp\u0142yn\u0119\u0142o<\/a><\/noindex> z certyfikatami centrum certyfikacji DarkMatter. Ale sens takiej operacji nie jest ca\u0142kowicie jasny (w poprzednich dyskusjach uznano to za bezu\u017cyteczne), poniewa\u017c w przypadku \u201ekrajowego certyfikatu bezpiecze\u0144stwa\u201d certyfikat ten pierwotnie nie jest obj\u0119ty \u015bcie\u017ckami zaufania, a przegl\u0105darki i tak wy\u015bwietlaj\u0105 ostrze\u017cenie bez zainstalowanego certyfikatu przez u\u017cytkownika. Z drugiej strony, brak reakcji ze strony producent\u00f3w przegl\u0105darek mo\u017ce stymulowa\u0107 wdra\u017canie podobnych system\u00f3w w innych krajach. Proponuje si\u0119 r\u00f3wnie\u017c wprowadzenie nowego wska\u017anika dla lokalnie zainstalowanych certyfikat\u00f3w, kt\u00f3re by\u0142y wykorzystywane w atakach MITM.<\/p>\n

<\/a><\/noindex><\/p>\n

\u0179r\u00f3d\u0142o: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u0432 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0441 2016 \u0433\u043e\u0434\u0430 \u043f\u043e\u043f\u0440\u0430\u0432\u043a\u0430\u043c\u0438 \u043a \u0437\u0430\u043a\u043e\u043d\u0443 «\u041e \u0441\u0432\u044f\u0437\u0438», \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u0430\u0437\u0430\u0445\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Kcell, Beeline, Tele2 \u0438 Altel, \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f \u0432\u0432\u0435\u043b\u0438 \u0432 \u0441\u0442\u0440\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441 \u043f\u043e\u0434\u043c\u0435\u043d\u043e\u0439 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432 2016 \u0433\u043e\u0434\u0443, \u043d\u043e \u044d\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u043b\u0430\u0441\u044c \u0438 \u0437\u0430\u043a\u043e\u043d \u0443\u0436\u0435 \u0441\u0442\u0430\u043b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36304","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47W Kazachstanie kilku du\u017cych dostawc\u00f3w wprowadzi\u0142o przechwytywanie ruchu HTTPS | ProHoster","description":"Zgodnie z obowi\u0105zuj\u0105cymi w Kazachstanie od 2016 roku poprawkami do ustawy \"O komunikacji\", wielu kazachsta\u0144skich dostawc\u00f3w.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0440\u044f\u0434 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0432\u043d\u0435\u0434\u0440\u0438\u043b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 | ProHoster","og:description":"\u0412 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u0432 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0441 2016 \u0433\u043e\u0434\u0430 \u043f\u043e\u043f\u0440\u0430\u0432\u043a\u0430\u043c\u0438 \u043a \u0437\u0430\u043a\u043e\u043d\u0443 \u00ab\u041e \u0441\u0432\u044f\u0437\u0438\u00bb, \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u0430\u0437\u0430\u0445\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:10:50+00:00","article:modified_time":"2019-10-31T19:10:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36304","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 02:48:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:47:34","updated":"2026-01-22 02:48:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/36304","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=36304"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/36304\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=36304"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=36304"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=36304"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}