4 ms·

TLS isn't sufficient. There was at least one country, Kazakhstan, which had a plan to force all of its citizens to install their own CA to MITM all SSL traffic.

TLS isn't sufficient. There was at least one country, Kazakhstan, which had a plan to force all of its citizens to install their own CA to MITM all SSL traffic. (I'm not sure if the plan ever got implemented because the original government press release now 404's). https://www.eff.org/deeplinks/2015/12/kazakhstan-considers-plan-snoop-all-internet-traffic https://www.eff.org/deeplinks/2015/12/kazakhstan-considers-p...

jccooper 8y ago
That's a case of traffic originating in an unsafe country. Circumventing local laws is a completely different issue. This is about transiting "unsafe" countries while routing to/from a (reasonably?) "safe" country. (Are you really certain Brazil isn't logging local traffic? I wouldn't be.) Anyway, TLS does leak a lot of metadata, which perhaps you'd rather publish a bit less widely. It's an improvement in casual security, which is nice, but not gonna save your bacon on anything specific.