3 ms·

The best solution would be to blacklist rouge SSL certs.

vkou 7y ago
Doing so will make the internet (In Kazakhstan) unusable, because everywhere you go, you will see an 'untrusted cert' warning.
- worldofmatthew 7y ago
  Sometimes stuff likes this needs doing in order to show how bad MITM is.
  - vkou 7y ago
    Okay, say you live in Kazakhstan. You stop using the Internet. Do you think the government will care?
    - novok 7y ago
      If it ruins their economy, yes.
      - vkou 7y ago
        99% of the population will happily install the government cert, and life will move on. The 1% will either put up with it, stop using the internet, or leave. One thing will happen though - the economy will not be ruined. Generally speaking, since the Cold War ended, these sorts of countries don't mind troublemakers leaving. It's better international PR for them to have 'problem people' leave voluntarily, than to repress them.
        vbezhenar 7y ago
        For example there's no way for my LG TV to install that root CA, so all that smartness basically rendered useless, unless LG would issue new firmware for that region and I'm not really sure that they would care enough. I bet that there are plenty of devices that would stop working. Think about all those IoT devices. I could imagine some kind of eye surgery laser device to stop working because it can't connect to its Zurich servers to check license. Yes, it won't cause revolution, but there will be a lot of issues.
        worldofmatthew 7y ago
        Thats why I suggest web browsers blacklist this cert that is not apporved by the websites affected.
    - worldofmatthew 7y ago
      Think more towards break everything, as you would end up with out of date broowsers being used. This will have the side effect of causing almost the whole country to be vulnerable to attack. Instability is the key.
coldpie 7y ago
Aw, let them use whatever color they like.
ddalex 7y ago
Perhaps whitelist just the bleu-marine ones?
vbezhenar 7y ago
They probably will issue alternative Firefox and Chromium build. That would be worse. Though if entire tech industry will fight this attempt, like Windows will stop updating, macOS, iOS, Android, etc, probably they will step back. But I don't think that anyone would do so. Especially because that scenario is legitimate and widely used by corporations to control their perimeter and Kazakhstan ultimately does not differ.

vkou 7y ago

Doing so will make the internet (In Kazakhstan) unusable, because everywhere you go, you will see an 'untrusted cert' warning.

worldofmatthew 7y ago
Sometimes stuff likes this needs doing in order to show how bad MITM is.
- vkou 7y ago
  Okay, say you live in Kazakhstan. You stop using the Internet. Do you think the government will care?
  - novok 7y ago
    If it ruins their economy, yes.
    - vkou 7y ago
      99% of the population will happily install the government cert, and life will move on. The 1% will either put up with it, stop using the internet, or leave. One thing will happen though - the economy will not be ruined. Generally speaking, since the Cold War ended, these sorts of countries don't mind troublemakers leaving. It's better international PR for them to have 'problem people' leave voluntarily, than to repress them.
      - vbezhenar 7y ago
        For example there's no way for my LG TV to install that root CA, so all that smartness basically rendered useless, unless LG would issue new firmware for that region and I'm not really sure that they would care enough. I bet that there are plenty of devices that would stop working. Think about all those IoT devices. I could imagine some kind of eye surgery laser device to stop working because it can't connect to its Zurich servers to check license. Yes, it won't cause revolution, but there will be a lot of issues.
      - worldofmatthew 7y ago
        Thats why I suggest web browsers blacklist this cert that is not apporved by the websites affected.
  - worldofmatthew 7y ago
    Think more towards break everything, as you would end up with out of date broowsers being used. This will have the side effect of causing almost the whole country to be vulnerable to attack. Instability is the key.

coldpie 7y ago

Aw, let them use whatever color they like.

ddalex 7y ago

Perhaps whitelist just the bleu-marine ones?

vbezhenar 7y ago

They probably will issue alternative Firefox and Chromium build. That would be worse. Though if entire tech industry will fight this attempt, like Windows will stop updating, macOS, iOS, Android, etc, probably they will step back. But I don't think that anyone would do so. Especially because that scenario is legitimate and widely used by corporations to control their perimeter and Kazakhstan ultimately does not differ.