MuKazakhstan, huwandu hwevanopa vakakura vakaisa HTTPS kuvharira traffic

Zvinoenderana neavo vari kushanda muKazakhstan kubvira 2016 amendments kuMutemo "Pane Kukurukurirana", vazhinji vanopa Kazakh, kusanganisira kcell,
Beeline, Tele2 ΠΈ Altel, kubva nhasi kuiswa mukushanda masisitimu ekuvharira mutengi HTTPS traffic nekutsiva kweyakatanga kushandiswa chitupa. Pakutanga, chirongwa chekubira chakarongwa kuti chiitwe muna 2016, asi basa iri raigara richimiswa uye mutemo wakatanga kutorwa sewakarongeka. Kupindira kunoitwa pasi pechifukidziro kunetseka nezve kuchengetedzwa kwevashandisi uye chishuwo chekudzivirira kubva kune izvo zvinounza njodzi.

Kudzima yambiro mumabhurawuza nezvekushandiswa kwechitupa chisiricho kune vashandisi yakatarwa isa pamasystem ako"chitupa chekuchengetedzwa kwenyika", iyo inoshandiswa pakutepfenyura traffic yakachengetedzwa kunzvimbo dzekunze (semuenzaniso, kutsiva traffic kuFacebook kwatoonekwa).

Kana kubatana kweTLS kwatangwa, chitupa chaicho chenzvimbo inotarirwa chinotsiviwa nechitupa chitsva chinogadzirwa panhunzi, icho chinozoiswa chiratidzo nebrowser seyakavimbika kana "chitupa chekuchengetedzwa kwenyika" chakawedzerwa nemushandisi kune chitupa chemidzi. chitoro, sezvo chitupa chedummy chakabatanidzwa neketani yekuvimba ne "National Security certificate".

Muchokwadi, muKazakhstan, dziviriro yakapihwa neHTTPS protocol inokanganiswa zvachose, uye zvese zvikumbiro zveHTTPS hazvina kunyanya kusiyana neHTTP kubva pakuona kwekugona kwekutevera nekutsiviwa kwetraffic nemasangano ehungwaru. Hazvibviri kudzora kushungurudzwa muchirongwa chakadaro, kusanganisira kana makiyi ekunyorera ane hukama ne "National Security certificate" anowira mune mamwe maoko nekuda kwekudonha.

Browser vagadziri vari kufunga chikumbiro wedzera chitupa chemudzi chakashandiswa kubvunzurudza kune chitupa chekudzosa runyorwa (OneCRL), munguva pfupi yapfuura Mozilla akapinda nezvitupa kubva kuDarkMatter certification authority. Asi zvinorehwa nekuvhiya kwakadaro hazvina kunyatsojeka (munhaurirano dzakapfuura zvaionekwa sezvisina basa), nekuti kana iri "chitupa chekuchengetedzwa kwenyika" ichi chitupa hachina kuvharwa neketani dzekuvimba uye pasina mushandisi kuisa chitupa, mabhurawuza anotoratidza yambiro. Kune rimwe divi, kushaikwa kwemhinduro kubva kune vagadziri vebrowser kunogona kukurudzira kuunzwa kwemaitiro akafanana mune dzimwe nyika. Senge sarudzo, inokurudzirwawo kuita chiratidzo chitsva chezvitupa zvakaiswa munharaunda zvakabatwa mukurwiswa kweMITM.

Source: opennet.ru

Voeg