National Certificate in Kazakhstan Is Canceled

When you say:

> we got the free Internet, the government got an instrument for fighting digital weapons

I'm not sure what this means. What is the instrument the government now has for fighting digital weapons? Is it the ability to turn this HTTPS interception back on later?

If so, this doesn't sound like _great_ news. That would mean the government has stopped intercepting traffic for now, but it reserves the right & capability to do so again in future whenever it feels like it (I.e. whenever the internet next contains something Kazakhstan gov doesn't like).

> P.S. We are especially proud of our role in the process. It was difficult not to fall into a negative point and maintain neutrality, but now we are satisfied with ourselves.

Not sure if the translation has not carried through. Are you staying you are pleased you did not oppose it because opposing it might have caused to government to make it permanent?

Sounds like the moment the government needs to crack down on someone they will flip the switch knowing there won't be any opposition.

I can't help but think if the government were wanting to spread positive propoganda about these tests, your post is exactly what they would write: "everyone wins and everyone is happy with our results of MTIMing the entire country".

> I can't help but think if the government were wanting to spread positive propoganda about these tests, your post is exactly what they would write: "everyone wins and everyone is happy with our results of MTIMing the entire country".

My thoughts exactly. It's hard not to be a cynic about something like this.

Indeed, the OP has such a dodgy sound to it. Like a satire of how the regime's puppets would wriggle out of their situation.

> The need for its installation may arise in cases of strengthening the digital border of Kazakhstan within the framework of special regulations.

Translation attempt: If deemed necessary, people will be forced to install a state certificate again.

Assuming that the goal is to be able to break encryption:

- How do you ensure people will install the certificate?

- How do you ensure people don't communicate by state-intransparent means, even with the certificate installed?

I'm guessing heavy, heavy penalties?

> How do you ensure people will install the certificate?

I think the short answer is: your internet won't work until you do.

VPNs out of the country avoid this of course; not clear if they're working to actively block that.

No, they will put you in jail first and ask questions later. Unjustified imprisonment compensation will take years to get and amount will be laughable probably something along the lines of 5000 EUR per year or less.

> I'm guessing heavy, heavy penalties?

Rubber-hose cryptanalysis

What is TSARKA (who are you)?

What you mean you are proud of your role?

What you mean by neutrality other than negativity, when the whole story is about forced access to everyone's computer to install a backdoor devised by the government?

I think this [0] is TSARKA. I'm a bit vague on what they actually _do_ looking through the site.

The TSARKA president said something along the lines of:

> [TSARKA] is the first private computer incident response team in Kazakhstan.

So I _think_ they're a IT security contractor, and from other things they seem to have a leaning towards penetration testing.

[0] https://tsarka.org/

I wonder about the "you are now free to delete the certificate". Not everyone will do this if they aren't tech savvy enough, or don't care. This will mean 2 things 1. Those that don't may still be able to have their traffic intercepted 2. Those that do reject the signing (if the attempt is made) may find themselves the subject to further investigation.

Perhaps OS and browser vendors should push out updates that blacklist the certificate?

Link to the official statement would definitely help.

Does this count (same announcement, but on the site of the org)? https://tsarka.org/post/national-certificate-cancelled

Yep, thanks. Now I have an idea what "We are especially proud of our role in the process" means.

Since the organisation seems to be posting here officially, instead of jumping into speculation right away, why don't we try to ask them some questions first?

Context, https://www.zdnet.com/article/kazakhstan-government-is-now-i...

Discussion in mozilla.dev.security.policy (mailing list to discuss TLS implementation in Firefox/NSS): https://groups.google.com/forum/#!topic/mozilla.dev.security...

so, a CERT organisation that is proud of its role in mitm'ing all traffic in the country ?

Of course, all in the name of fighting the four horsemen of the infocalypse... (ref. https://en.wikipedia.org/wiki/Four_Horsemen_of_the_Infocalyp...)

You might want to get your moral compass checked.

I wonder if normal citizens of Kazakhstan can visit HN and report the situation there.

The SSL cert was simply for "bad" data on "trusted" sites. See https://en.wikipedia.org/wiki/Internet_censorship_in_Kazakhs...

Why is your name green?

Green names indicate newer accounts.

This is so that established users can provide friendly, helpful, advice and pointers to features of HN.

Thank you; I didn't know that. I thought green color had something to do with whether the user is the topic starter or not

It is a propoaganda account -- recently created to convey the message: "Everything is fine, everything is OK, nothing fishy has happened in Kazakhstan, now move along nothing to see here..."

"And if we force you to install our certificate again, don't trouble yourself, its to fight 'digital weapons' you know..."

I misread Karazhan... What the fuck is the Violet Eye up to now...

Prince Malchezaar should have the answer