Vashandisi vehurumende masevhisi portal yeRussian Federation (gosuslugi.ru) vakagamuchira chiziviso nezve kusikwa kwenzvimbo yezvitupa yehurumende ine midzi yavo TLS chitupa, iyo isingabatanidzwe mumudzi magwaro ezvitoro zvemashandisirwo masisitimu uye mabhurawuza makuru. Zvitupa zvinopihwa nekuzvidira kune masangano emutemo uye zvinotarisirwa kushandiswa mumamiriro ekudzingwa kana kumisa kuvandudzwa kwezvitupa zveTLS nekuda kwezvirango. Semuyenzaniso, zviremera zvezvitupa zviri pasi pehutongi hweUS, zvakaita seDigiCert, zvakamira kupa zvitupa kumawebhusaiti emasangano anosanganisirwa muhurongwa hwezvirango.
Parizvino, iyo nyika midzi chitupa inosanganiswa chete muYandex.Browser uye Atom zvigadzirwa. Kuti uve nechokwadi chekuvimba nemamwe mabhurawuza emasaiti anoshandisa zvitupa kubva kuhurumende certification chiremera, iwe unofanirwa kuwedzera midzi chitupa kune sisitimu kana browser chitoro chezvitupa.
Pakati pemasayiti akatowana zvitupa zvehurumende TLS mabhanga akasiyana-siyana (Sberbank, VTB, Central Bank) nemasangano nemapurojekiti akabatana nemasangano ehurumende. Panguva imwecheteyo, panguva yekunyora nhau, mawebhusaiti makuru eSberbank neVTB anoramba achishandisa zvitupa zveTLS zvechinyakare, zvinotsigirwa mumabhurawuza ese, asi ma subdomain ega (semuenzaniso, online-alpha.vtb.ru) atove kuendeswa kuchitupa chitsva.
Kana CA itsva ikatanga kuisirwa, kana kushungurudzwa kwakadai sekurwiswa kweMITM kwawanikwa, zvingangoita kuti vatengesi veFirefox, Chrome, Edge uye Safari mabhurawuza atore danho rekuwedzera dambudziko reti chitupa kune zvitupa zvekubvisa zvitupa, se. vakatoita nechitupa, chakaitwa kuti vabate HTTPS traffic muKazakhstan.
Source: opennet.ru