7 ms·

Mentioned this in another thread off the same converasion: Russia intelligence services can almost certainly break consumer grade encryption.

zzzcpan 10y ago
There is no supporting infrastructure for this at the moment, even if you presume, that they stole secret keys from some CAs.
- jwtadvice 10y ago
  Are you claiming that the Russian government doesn't have a domestic surveillance infrastructure?
  - zzzcpan 10y ago
    Technically it has, but only for unencrypted communications and without cooperation from internet companies. Which they really want to change with all the new laws and everything.
    - jwtadvice 10y ago
      So the assertion is that Russian intelligence services cannot thwart encryption, including the encryption that it standardized for civilian use? If this were true, I would feel very comfortable speaking about politics in Russia, as in the United States all consumer-grade encryption is being broken by our intelligence services.
      - zzzcpan 10y ago
        There is no "encryption for civilian use", they did, however, standardize the encryption for government use.
      - int_19h 10y ago
        I'm not sure what you mean by "civilian use encryption". If it's SSL, then I don't see how they would have the means - so far as I know, it's still cryptographically secure, and unlike US, they can't just force certificate authorities to cooperate and allow them to do MITM. There have been some attempts by the ISPs to enable MITM, but it's very crude - they basically block SSL, except for their own custom root certificate that they explicitly require you to install, and then they use that to MITM you. It's all very blatant, and I think there was only one ISP actually trying to do it. Also, I'm not aware of any cases of dissenters caught because their encryption was broken. Most people who get persecuted for their views said all the things they did out in the open, either to make a stand, or because they were careless.

zzzcpan 10y ago

There is no supporting infrastructure for this at the moment, even if you presume, that they stole secret keys from some CAs.

jwtadvice 10y ago
Are you claiming that the Russian government doesn't have a domestic surveillance infrastructure?
- zzzcpan 10y ago
  Technically it has, but only for unencrypted communications and without cooperation from internet companies. Which they really want to change with all the new laws and everything.
  - jwtadvice 10y ago
    So the assertion is that Russian intelligence services cannot thwart encryption, including the encryption that it standardized for civilian use? If this were true, I would feel very comfortable speaking about politics in Russia, as in the United States all consumer-grade encryption is being broken by our intelligence services.
    - zzzcpan 10y ago
      There is no "encryption for civilian use", they did, however, standardize the encryption for government use.
    - int_19h 10y ago
      I'm not sure what you mean by "civilian use encryption". If it's SSL, then I don't see how they would have the means - so far as I know, it's still cryptographically secure, and unlike US, they can't just force certificate authorities to cooperate and allow them to do MITM. There have been some attempts by the ISPs to enable MITM, but it's very crude - they basically block SSL, except for their own custom root certificate that they explicitly require you to install, and then they use that to MITM you. It's all very blatant, and I think there was only one ISP actually trying to do it. Also, I'm not aware of any cases of dissenters caught because their encryption was broken. Most people who get persecuted for their views said all the things they did out in the open, either to make a stand, or because they were careless.