{"id":36304,"date":"2019-10-31T22:10:50","date_gmt":"2019-10-31T19:10:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika\/"},"modified":"2019-10-31T22:10:50","modified_gmt":"2019-10-31T19:10:50","slug":"v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","title":{"rendered":"I Kazakstan har flera stora leverant\u00f6rer inf\u00f6rt avlyssning av HTTPS-trafik","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

I enlighet med de g\u00e4llande \u00e4ndringarna i Kazakstan fr\u00e5n 2016 \u00e4ndringar<\/a><\/noindex> Enligt lagen \"Om kommunikation\" har m\u00e5nga kazakiska leverant\u00f6rer, inklusive Kcell<\/a><\/noindex>,
\nBeeline<\/a><\/noindex>, Tele2<\/a><\/noindex> och Altel<\/a><\/noindex>, fr\u00e5n och med idag inf\u00f6rt<\/a><\/noindex> system f\u00f6r avlyssning av HTTPS-trafik fr\u00e5n kunder med en ers\u00e4ttning av det ursprungliga certifikatet. Initialt var det planerat att inf\u00f6ra avlyssningssystemet 2016, men operationen har st\u00e4ndigt skjutits upp och lagen har blivit uppfattad som formell. Avlyssningen genomf\u00f6rs i skepnad av<\/a><\/noindex> omsorg om anv\u00e4ndares s\u00e4kerhet och viljan att skydda dem fr\u00e5n hotande inneh\u00e5ll.<\/p>\n

F\u00f6r att st\u00e4nga av varningen om anv\u00e4ndning av ett ogiltigt certifikat i webbl\u00e4sare \u00e5l\u00e4ggs anv\u00e4ndarna<\/a><\/noindex> installera p\u00e5 sina system \"nationellt s\u00e4kerhetscertifikat<\/a><\/noindex>\", som anv\u00e4nds f\u00f6r att str\u00f6mma skyddad trafik till utl\u00e4ndska webbplatser (till exempel har det redan registrerats trafikf\u00f6rfalskning till Facebook).<\/p>\n

Vid installation av TLS-anslutning byts det verkliga certifikatet fr\u00e5n m\u00e5lsidan ut mot ett nytt certifikat som genererats p\u00e5 plats, vilket kommer att markeras av webbl\u00e4saren som giltigt om \"det nationella s\u00e4kerhetscertifikatet\" har lagts till av anv\u00e4ndaren i lagringssystemet f\u00f6r rotcertifikat, eftersom det falska certifikatet \u00e4r kopplat till en kedja av f\u00f6rtroende med \"det nationella s\u00e4kerhetscertifikatet.\" <\/p>\n

I praktiken \u00e4r skyddet som tillhandah\u00e5lls av HTTPS-protokollet helt komprometterat i Kazakstan, och alla HTTPS-f\u00f6rfr\u00e5gningar ur perspektivet f\u00f6r \u00f6vervakning och f\u00f6rfalskning av trafik av s\u00e4kerhetstj\u00e4nster skiljer sig knappt fr\u00e5n HTTP. Att \u00f6vervaka missbruk i ett s\u00e5dant system \u00e4r om\u00f6jligt, s\u00e4rskilt om kopplade nycklar f\u00f6r \"det nationella s\u00e4kerhetscertifikatet\" hamnar i fel h\u00e4nder p\u00e5 grund av l\u00e4ckage.<\/p>\n

Webbl\u00e4sarutvecklare m\u00f6jligheten att anv\u00e4nda den nya teknologin. Enligt<\/a><\/noindex> da ett f\u00f6rslag<\/a><\/noindex> att l\u00e4gga till rotcertifikatet som anv\u00e4nds f\u00f6r avlyssning i listan \u00f6ver \u00e5terkallade certifikat (OneCRL), som nyligen Mozilla gick med p\u00e5<\/a><\/noindex> med certifikat fr\u00e5n certifieringsmyndigheten DarkMatter. Men meningen med en s\u00e5dan operation \u00e4r inte helt klar (i tidigare diskussioner ans\u00e5gs den vara meningsl\u00f6s), eftersom detta certifikat fr\u00e5n \"det nationella s\u00e4kerhetscertifikatet\" initialt inte omfattas av f\u00f6rtroendekedjor, och utan att certifikatet \u00e4r installerat av anv\u00e4ndaren varnar webbl\u00e4sare \u00e4nd\u00e5. \u00c5 andra sidan kan avsaknad av reaktion fr\u00e5n webbl\u00e4sartillverkare stimulera implementeringen av liknande system i andra l\u00e4nder. Som ett alternativ f\u00f6resl\u00e5s \u00e4ven att inf\u00f6ra en ny indikator f\u00f6r lokalt installerade certifikat som har avsl\u00f6jats i MITM-attacker.<\/p>\n

<\/a><\/noindex><\/p>\n

K\u00e4lla: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u0432 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0441 2016 \u0433\u043e\u0434\u0430 \u043f\u043e\u043f\u0440\u0430\u0432\u043a\u0430\u043c\u0438 \u043a \u0437\u0430\u043a\u043e\u043d\u0443 «\u041e \u0441\u0432\u044f\u0437\u0438», \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u0430\u0437\u0430\u0445\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Kcell, Beeline, Tele2 \u0438 Altel, \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f \u0432\u0432\u0435\u043b\u0438 \u0432 \u0441\u0442\u0440\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441 \u043f\u043e\u0434\u043c\u0435\u043d\u043e\u0439 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432 2016 \u0433\u043e\u0434\u0443, \u043d\u043e \u044d\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u043b\u0430\u0441\u044c \u0438 \u0437\u0430\u043a\u043e\u043d \u0443\u0436\u0435 \u0441\u0442\u0430\u043b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36304","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47I Kazakstan har flera stora internetleverant\u00f6rer implementerat avlyssning av HTTPS-trafik | ProHoster","description":"Enligt de lag\u00e4ndringar som tr\u00e4dde i kraft i Kazakstan 2016 r\u00f6rande lagen \"Om kommunikation\", m\u00e5nga kazakiska internetleverant\u00f6rer.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0440\u044f\u0434 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0432\u043d\u0435\u0434\u0440\u0438\u043b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 | ProHoster","og:description":"\u0412 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u0432 \u041a\u0430\u0437\u0430\u0445\u0441\u0442\u0430\u043d\u0435 \u0441 2016 \u0433\u043e\u0434\u0430 \u043f\u043e\u043f\u0440\u0430\u0432\u043a\u0430\u043c\u0438 \u043a \u0437\u0430\u043a\u043e\u043d\u0443 \u00ab\u041e \u0441\u0432\u044f\u0437\u0438\u00bb, \u043c\u043d\u043e\u0433\u0438\u0435 \u043a\u0430\u0437\u0430\u0445\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/v-kazahstane-ryad-krupnyh-provajderov-vnedril-perehvat-https-trafika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:10:50+00:00","article:modified_time":"2019-10-31T19:10:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36304","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 02:48:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:47:34","updated":"2026-01-22 02:48:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/36304","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=36304"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/36304\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=36304"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=36304"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=36304"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}