{"id":36304,"date":"2019-10-31T22:10:50","date_gmt":"2019-10-31T19:10:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika\/"},"modified":"2019-10-31T22:10:50","modified_gmt":"2019-10-31T19:10:50","slug":"v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","title":{"rendered":"\u00cen Kazakhstan, o serie de mari furnizori au implementat interceptarea traficului HTTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen conformitate cu modific\u0103rile \u00een vigoare \u00een Kazakhstan din 2016 puterile legislative<\/a><\/noindex> \u00cen conformitate cu legea \u201eCu privire la telecomunica\u021bii\u201d, mul\u021bi furnizori de servicii din Kazahstan, inclusiv Kcell<\/a><\/noindex>,
\nBeeline<\/a><\/noindex>, Tele2<\/a><\/noindex> \u0219i Altel<\/a><\/noindex>, \u00eencep\u00e2nd de ast\u0103zi au dat \u00een func\u021biune<\/a><\/noindex> sisteme de interceptare a traficului HTTPS al clien\u021bilor, cu \u00eenlocuirea certificatului ini\u021bial utilizat. Ini\u021bial, sistemul de interceptare urma s\u0103 fie implementat \u00een 2016, dar aceast\u0103 opera\u021biune a fost \u00een mod constant am\u00e2nat\u0103, iar legea a \u00eenceput s\u0103 fie perceput\u0103 ca una formal\u0103. Interceptarea se realizeaz\u0103 sub pretextul<\/a><\/noindex> \u00eengrijor\u0103rii pentru securitatea utilizatorilor \u0219i dorin\u021bei de a-i proteja de con\u021binutul care prezint\u0103 o amenin\u021bare.<\/p>\n

Pentru a dezactiva afi\u0219area \u00een browsere a avertismentului privind utilizarea unui certificat incorect, utilizatorii sunt obliga\u021bi<\/a><\/noindex> s\u0103 instaleze \u00een sistemele lor \u201ecertificatul na\u021bional de securitate<\/a><\/noindex>\u201c, care este utilizat pentru transmiterea traficului protejat c\u0103tre site-uri externe (de exemplu, deja se observ\u0103 falsificarea traficului c\u0103tre Facebook).<\/p>\n

La stabilirea unei conexiuni TLS, certificatul real al site-ului \u021bint\u0103 este \u00eenlocuit cu un certificat generat pe loc, care va fi marcat de browser ca fiind de \u00eencredere, dac\u0103 \u201ecertificatul na\u021bional de securitate\u201d a fost ad\u0103ugat de utilizator \u00een depozitul de certificate r\u0103d\u0103cin\u0103, deoarece certificatul de substitu\u021bie este legat printr-un lan\u021b de \u00eencredere de \u201ecertificatul na\u021bional de securitate\u201d. <\/p>\n

Practic, \u00een Kazahstan, protec\u021bia oferit\u0103 de protocolul HTTPS este complet compromis\u0103, iar toate cererile HTTPS, din perspectiva posibilit\u0103\u021bii de urm\u0103rire \u0219i falsificare a traficului de c\u0103tre serviciile speciale, nu se deosebesc mult de HTTP. Controlul abuzurilor \u00eentr-un astfel de sistem este imposibil, inclusiv \u00een cazul \u00een care cheile de criptare asociate cu \u201ecertificatul na\u021bional de securitate\u201d ajung \u00een alte m\u00e2ini \u00een urma unei scurgeri.<\/p>\n

Dezvoltatorii de browsere iau \u00een considerare<\/a><\/noindex> propunerea<\/a><\/noindex> de a ad\u0103uga certificatul r\u0103d\u0103cin\u0103 utilizat pentru interceptare \u00een lista certificatelor revocate (OneCRL), a\u0219a cum a procedat recent Mozilla \u00een mod similar.<\/a><\/noindex> cu certificatele centrului de certificare DarkMatter. Dar sensul acestei opera\u021biuni nu este foarte clar (\u00een discu\u021biile anterioare, a fost considerat inutil), deoarece \u00een cazul \u201ecertificatului na\u021bional de securitate\u201d acest certificat nu este acoperit ini\u021bial de lan\u021buri de \u00eencredere, iar f\u0103r\u0103 instalarea certificatului de c\u0103tre utilizator, browserele oricum emit un avertisment. Pe de alt\u0103 parte, absen\u021ba unei reac\u021bii din partea produc\u0103torilor de browsere ar putea stimula implementarea unor sisteme similare \u00een alte \u021b\u0103ri. Ca op\u021biune, se propune de asemenea implementarea unui nou indicator pentru certificatele instalate local, suspectate de atacuri MITM.<\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u0432 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0441 2016 \u0433\u043e\u0434\u0430 \u043f\u043e\u043f\u0440\u0430\u0432\u043a\u0430\u043c\u0438 \u043a \u0437\u0430\u043a\u043e\u043d\u0443 «\u041e \u0441\u0432\u044f\u0437\u0438», \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u0430\u0437\u0430\u0445\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Kcell, Beeline, Tele2 \u0438 Altel, \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f \u0432\u0432\u0435\u043b\u0438 \u0432 \u0441\u0442\u0440\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441 \u043f\u043e\u0434\u043c\u0435\u043d\u043e\u0439 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432 2016 \u0433\u043e\u0434\u0443, \u043d\u043e \u044d\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u043b\u0430\u0441\u044c \u0438 \u0437\u0430\u043a\u043e\u043d \u0443\u0436\u0435 \u0441\u0442\u0430\u043b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36304","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00cen Kazahstan, mai mul\u021bi furnizori mari au implementat interceptarea traficului HTTPS | ProHoster","description":"Conform modific\u0103rilor \u00een vigoare \u00een Kazahstan din 2016 la legea \u201eDespre comunica\u021bii\u201d, mul\u021bi furnizori kazahi.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0440\u044f\u0434 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0432\u043d\u0435\u0434\u0440\u0438\u043b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 | ProHoster","og:description":"\u0412 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u0432 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0441 2016 \u0433\u043e\u0434\u0430 \u043f\u043e\u043f\u0440\u0430\u0432\u043a\u0430\u043c\u0438 \u043a \u0437\u0430\u043a\u043e\u043d\u0443 \u00ab\u041e \u0441\u0432\u044f\u0437\u0438\u00bb, \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u0430\u0437\u0430\u0445\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:10:50+00:00","article:modified_time":"2019-10-31T19:10:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36304","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 02:48:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:47:34","updated":"2026-01-22 02:48:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/36304","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=36304"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/36304\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=36304"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=36304"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=36304"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}