{"id":36304,"date":"2019-10-31T22:10:50","date_gmt":"2019-10-31T19:10:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika\/"},"modified":"2019-10-31T22:10:50","modified_gmt":"2019-10-31T19:10:50","slug":"v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","title":{"rendered":"No Cazaquist\u00e3o, v\u00e1rios grandes provedores implementaram a intercepta\u00e7\u00e3o de tr\u00e1fego HTTPS.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

De acordo com as emendas em vigor no Cazaquist\u00e3o desde 2016, as modifica\u00e7\u00f5es<\/a><\/noindex> De acordo com a lei «Sobre Comunica\u00e7\u00e3o», muitos provedores cazaques, incluindo Kcell<\/a><\/noindex>,
\nBeeline<\/a><\/noindex>, Tele2<\/a><\/noindex> e Altel<\/a><\/noindex>, a partir de hoje colocaram em opera\u00e7\u00e3o<\/a><\/noindex> sistemas que interceptam o tr\u00e1fego HTTPS dos clientes, substituindo o certificado originalmente utilizado. Inicialmente, a implementa\u00e7\u00e3o da intercepta\u00e7\u00e3o estava prevista para 2016, mas essa opera\u00e7\u00e3o foi constantemente adiada e a lei acabou sendo percebida como formal. A intercepta\u00e7\u00e3o \u00e9 realizada sob a apar\u00eancia de<\/a><\/noindex> preocupa\u00e7\u00e3o com a seguran\u00e7a dos usu\u00e1rios e do desejo de proteg\u00ea-los de conte\u00fados que oferecem amea\u00e7a.<\/p>\n

Para desativar a exibi\u00e7\u00e3o no navegador de avisos sobre a utiliza\u00e7\u00e3o de um certificado incorreto, os usu\u00e1rios s\u00e3o obrigados<\/a><\/noindex> instalar em seus sistemas «certificado nacional de seguran\u00e7a<\/a><\/noindex>«, que \u00e9 aplicado na transmiss\u00e3o de tr\u00e1fego protegido para sites internacionais (por exemplo, j\u00e1 foi registrada a manipula\u00e7\u00e3o de tr\u00e1fego para o Facebook).<\/p>\n

Ao estabelecer uma conex\u00e3o TLS, o certificado real do site de destino \u00e9 substitu\u00eddo por um novo certificado gerado em tempo real, que ser\u00e1 marcado pelo navegador como confi\u00e1vel, se o «certificado de seguran\u00e7a nacional» tiver sido adicionado pelo usu\u00e1rio ao armazenamento de certificados raiz, uma vez que o certificado falso est\u00e1 vinculado em uma cadeia de confian\u00e7a com o «certificado de seguran\u00e7a nacional». <\/p>\n

Na verdade, no Cazaquist\u00e3o, a prote\u00e7\u00e3o oferecida pelo protocolo HTTPS est\u00e1 completamente comprometida e todas as solicita\u00e7\u00f5es HTTPS, em termos de rastreamento e manipula\u00e7\u00e3o de tr\u00e1fego por servi\u00e7os secretos, n\u00e3o diferem muito das solicita\u00e7\u00f5es HTTP. Controlar abusos em tal esquema \u00e9 imposs\u00edvel, inclusive quando as chaves de criptografia relacionadas ao «certificado de seguran\u00e7a nacional» caem em outras m\u00e3os como resultado de vazamentos.<\/p>\n

Desenvolvedores de navegadores est\u00e3o considerando<\/a><\/noindex> a proposta<\/a><\/noindex> de adicionar o certificado raiz usado para intercepta\u00e7\u00e3o \u00e0 lista de certificados revogados (OneCRL), como a Mozilla recentemente fez.<\/a><\/noindex> com certificados da autoridade certificadora DarkMatter. Mas o sentido de tal opera\u00e7\u00e3o n\u00e3o est\u00e1 completamente claro (nas discuss\u00f5es anteriores, foi considerada in\u00fatil), j\u00e1 que, no caso do «certificado de seguran\u00e7a nacional», este certificado n\u00e3o est\u00e1 inicialmente coberto por cadeias de confian\u00e7a e, sem a instala\u00e7\u00e3o do certificado pelo usu\u00e1rio, os navegadores j\u00e1 exibem um aviso. Por outro lado, a falta de rea\u00e7\u00e3o por parte dos fabricantes de navegadores pode estimular a implementa\u00e7\u00e3o de sistemas semelhantes em outros pa\u00edses. Como alternativa, tamb\u00e9m \u00e9 proposto implementar um novo indicador para certificados instalados localmente, que foram envolvidos em ataques MITM.<\/p>\n

<\/a><\/noindex><\/p>\n

Fonte: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u0432 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0441 2016 \u0433\u043e\u0434\u0430 \u043f\u043e\u043f\u0440\u0430\u0432\u043a\u0430\u043c\u0438 \u043a \u0437\u0430\u043a\u043e\u043d\u0443 «\u041e \u0441\u0432\u044f\u0437\u0438», \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u0430\u0437\u0430\u0445\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Kcell, Beeline, Tele2 \u0438 Altel, \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f \u0432\u0432\u0435\u043b\u0438 \u0432 \u0441\u0442\u0440\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441 \u043f\u043e\u0434\u043c\u0435\u043d\u043e\u0439 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432 2016 \u0433\u043e\u0434\u0443, \u043d\u043e \u044d\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u043b\u0430\u0441\u044c \u0438 \u0437\u0430\u043a\u043e\u043d \u0443\u0436\u0435 \u0441\u0442\u0430\u043b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36304","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47No Cazaquist\u00e3o, v\u00e1rios grandes provedores implementaram a intercepta\u00e7\u00e3o de tr\u00e1fego HTTPS | ProHoster","description":"De acordo com as emendas em vigor no Cazaquist\u00e3o desde 2016 \u00e0 lei \"Sobre Comunica\u00e7\u00f5es\", muitos provedores cazaques.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0440\u044f\u0434 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0432\u043d\u0435\u0434\u0440\u0438\u043b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 | ProHoster","og:description":"\u0412 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u0432 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0441 2016 \u0433\u043e\u0434\u0430 \u043f\u043e\u043f\u0440\u0430\u0432\u043a\u0430\u043c\u0438 \u043a \u0437\u0430\u043a\u043e\u043d\u0443 \u00ab\u041e \u0441\u0432\u044f\u0437\u0438\u00bb, \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u0430\u0437\u0430\u0445\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:10:50+00:00","article:modified_time":"2019-10-31T19:10:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36304","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 02:48:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:47:34","updated":"2026-01-22 02:48:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/36304","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=36304"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/36304\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=36304"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=36304"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=36304"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}