4 ms·
This is super-dumb. The same thing is happening with Russian banks. Their answer? They're now asking users to install root certs from the Russian ministry of c
by cyberax 26d ago
This is super-dumb. The same thing is happening with Russian banks.
Their answer? They're now asking users to install root certs from the Russian ministry of communications. So it can now MITM all the encrypted traffic in Russia.
- axus 26d agoDumb for the US: if US were currently MITM with certs copied by its agencies, US won't be able to do that for Iranian / Russian certs.
- misano 26d agoSSL MITM also requires hijacking the network and redirecting the traffic.
- Avamander 26d agoChina and many others run their own CAs, I'd presume Russians could use those if they wanted?
- throw-the-towel 26d agoRussians didn't want to use those, until the West made it inevitable.
- Avamander 26d agoAnd why is that? It's not that hard to find a CA in a more aligned regime. Rolling your own MITM CA as a replacement just looks like something that was waiting for an excuse.
- cyberax 26d agoViolating the OFCOM restrictions will result in losing access to VISA/MC payments. No company wants this.