> The national security certificate will secure protection of Kazakhstan users when using coded access protocols to foreign Internet resources. How is this protecting users? They are outright lying here, if I understand correctly. Also why are they asking for my location? http://i.imgur.com/fYKHRK1.png
Kazakhstan to MitM all HTTPS traffic starting Jan 1
11–20 of 378 posts
Re: Kazakhstan to MitM all HTTPS traffic starting Jan 1
#12Earlier quoted context omitted.
Remember they have your location anyway from your IP address.
That makes it only more interesting. However, I assume, IP-based location isn't that granular?
Re: Kazakhstan to MitM all HTTPS traffic starting Jan 1
#13> The national security certificate will secure protection of Kazakhstan users when using coded access protocols to foreign Internet resources. How is this protecting users? They are outright lying here, if I understand correctly. Also why are they asking for my location? http://i.imgur.com/fYKHRK1.png
Re: Kazakhstan to MitM all HTTPS traffic starting Jan 1
#14I guess "coded" here means VPN as well...
Wonder how other countries' embassies will be connecting if they block all the encrypted connections? Everything through a satellite connection presumably.
Re: Kazakhstan to MitM all HTTPS traffic starting Jan 1
#15I really appreciate how they're doing this. The Chinese built up an amazing infrastructure for the Great Firewall; the Kazakhs just say "install our cert!" The Chinese spend billions and have to stay ahead of all of their citizens' clever new ideas at all times; the Kazakhs spend a few hundred and just need to point guns at their citizens until they install a cert. Sure, it's going to be difficult to enforce, but it…
Only way to avoid is to use some kind of foreign satellite internet or maybe private / non government / non telco dark fibre.
Re: Kazakhstan to MitM all HTTPS traffic starting Jan 1
#16Re: Kazakhstan to MitM all HTTPS traffic starting Jan 1
#17Earlier quoted context omitted.
Remember they have your location anyway from your IP address.
That makes it only more interesting. However, I assume, IP-based location isn't that granular?
I am sure the NSA does better but Kazakhstan? I have been inside one of their embassies to be shocked that they were watching the news on a black and white CRT TV!!!
Re: Kazakhstan to MitM all HTTPS traffic starting Jan 1
#18Earlier quoted context omitted.
That makes it only more interesting. However, I assume, IP-based location isn't that granular?
It's very surprisingly granular. I logged dropped packets from my router's firewall for a week and looked up the origin locations with geoip for fun. Just plugging in the coordinates to google maps would zoom directly in on peoples' houses (sometimes in the middle of nowhere). I'm not sure it's 100% accurate, of course, but it sure seemed specific.
The city it resolves to is where my isp has their HQ.
Re: Kazakhstan to MitM all HTTPS traffic starting Jan 1
#19> secure protection of Kazakhstan users when using coded access protocols to foreign Internet resources. I guess "coded" here means VPN as well... Wonder how other countries' embassies will be connecting if they block all the encrypted connections? Everything through a satellite connection presumably.