In 2015 there were news that Kazakhstan was going to start intercepting all HTTPS traffic via "man-in-the-middle attack" starting Jan 1, 2016, by requiring kazakhstanis to install their root CA.

The original post has been taken down, archived version here: https://web.archive.org/web/20151202203337/http://telecom.kz/en/news/view/18729

Hacker News: https://news.ycombinator.com/item?id=10663843

Did this go actually into effect, is the policy active?

  • IMHO, I am considering such post as "conspiracy theory". The message from the given link only talk about install a new root CA into their browser. This is quite common to country with new root CA that are not added into browser by default. – mootmoot Jul 16 '18 at 12:50

Government got sued by association of local internet companies, banks and public organizations with the help of international organizations and foreign governments. On top of they realized how costly that entire plan would be both in terms of economic burden and international image of the country, so they temporarily backed off.

However they have a master switch now to disable most of the social networks and messengers which they already do and entire country's internet access in case of emergency (have not happened yet). There are strong rumors that biggest local provider Kazakhtelecom (basically internet backbone monopolist that owns >90% of physical network ) is actively building several large-scale data centers.

Allegedly they are going to re-route all of the incoming traffic through them and store the data in analogy with US run PRISM. If they successfully complete this step, they will be able to easily enforce MITM countrywide.

Source: me. I am from Kazakhstan. Actively use internet and believe in the freedom of communication and open source initiative. I've been closely following developments in this field, and that's all I know so far.

  • 2
    Do you have any references or links for all this information? – schroeder Nov 5 '18 at 10:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.