National Certificate in Kazakhstan Is Canceled

Over the past two weeks, residents of Nur-Sultan, capital of Kazakhstan, have faced problems with access to the Internet. Officials explained that it was happening because of the new security system's testing. It was said to be a part of «Cyber shield of Kazakhstan» which allows to increase the country's defense capability and counteract information wars. According to previously received statistics, the authorities managed to inspect a third of all traffic in the Nur-Sultan city.

TSARKA assumed the role of a moderator in this situation and it seems that we managed to reach the top management of the country and convey our arguments. From our point of view, the optimal solution has been reached in the course of negotiations with the participants of the process.

A few hours ago we were officially informed that the tests were completed, all the tasks set during the pilot were successfully solved. Those who have established the National Certificate may delete it since it will no longer be needed. The need for its installation may arise in cases of strengthening the digital border of Kazakhstan within the framework of special regulations.

We don’t know how you guys are, but we breathed a sigh of relief when we heard about this news. Everyone got their own: we got the free Internet, the government got an instrument for fighting digital weapons.

P.S. We are especially proud of our role in the process. It was difficult not to fall into a negative point and maintain neutrality, but now we are satisfied with ourselves.

When you say:

> we got the free Internet, the government got an instrument for fighting digital weapons

I'm not sure what this means. What is the instrument the government now has for fighting digital weapons? Is it the ability to turn this HTTPS interception back on later?

If so, this doesn't sound like _great_ news. That would mean the government has stopped intercepting traffic for now, but it reserves the right & capability to do so again in future whenever it feels like it (I.e. whenever the internet next contains something Kazakhstan gov doesn't like).

I wonder about the "you are now free to delete the certificate". Not everyone will do this if they aren't tech savvy enough, or don't care. This will mean 2 things 1. Those that don't may still be able to have their traffic intercepted 2. Those that do reject the signing (if the attempt is made) may find themselves the subject to further investigation.

Yep, thanks. Now I have an idea what "We are especially proud of our role in the process" means.

Since the organisation seems to be posting here officially, instead of jumping into speculation right away, why don't we try to ask them some questions first?

> The need for its installation may arise in cases of strengthening the digital border of Kazakhstan within the framework of special regulations.

Translation attempt: If deemed necessary, people will be forced to install a state certificate again.

Assuming that the goal is to be able to break encryption:

- How do you ensure people will install the certificate?

- How do you ensure people don't communicate by state-intransparent means, even with the certificate installed?

I'm guessing heavy, heavy penalties?