Re: SSL/TLS everywhere fail

On Thu, Dec 03, 2015 at 03:42:40PM +1000, Matthew Kerwin wrote:
> On 3 December 2015 at 15:32, Martin J. Dürst <duerst@it.aoyama.ac.jp> wrote:
> 
> > On 2015/12/03 08:18, Poul-Henning Kamp wrote:
> >
> >> That happened faster than even I thought:
> >>
> >>         http://telecom.kz/en/news/view/18729
> >>
> >
> > It returns a 404 now, at least for me. Maybe they realized they didn't
> > want the whole world to notice? Or it's just a local problem on my end?
> >
> > Regards,   Martin.
> >
> >
> ???Looks like they took it down. The essence was: "To ensure the safety of
> our citizens, all TLS connections will be terminated at the Kazakhstan
> ???border, here is the government-provided root certificate you have to
> install."

Too bad I closed my browser window just before reading this e-mail, I could
have copy-pasted it. Fortunately we have google cache, here's a copy of it
before it expires. We'll have other opportunities to read such messages in
the near future anyway.

Willy

---

  http://webcache.googleusercontent.com/search?q=cache:iNgneBgLnIUJ:telecom.kz/en/news/view/18729+&cd=2&hl=en&ct=clnk&gl=fr

  "
    Kazakhtelecom JSC notifies on introduction of National security certificate
    from 1 January 2016
    
    From 1 January 2016 pursuant to the Law of the Republic of Kazakhstan «On
    communication» Committee on Communication, Informatization and Information,
    Ministry for investments and development of the Republic of Kazakhstan
    introduces the national security certificate for Internet users.
    
    According to the Law telecom operators are obliged to perform traffic pass
    with using protocols, that support coding using security certificate, except
    traffic, coded by means of cryptographic information protection on the
    territory of the Republic of Kazakhstan.
    
    The national security certificate will secure protection of Kazakhstan users
    when using coded access protocols to foreign Internet resources.
    
    By words of Nurlan Meirmanov, Managing director on innovations of Kazakhtelecom
    JSC, Internet users shall install national security certificate, which will be
    available through Kazakhtelecom JSC internet resources. «User shall enter the
    site www.telecom.kz and install this certificate following step by step
    installation instructions"- underlined N.Meirmanov.
    
    Kazakhtelecom JSC pays special attention that installation of security
    certificate can be performed from each device of a subscriber, from which
    Internet access will be performed (mobile telephones and tabs on base of
    iOS/Android, PC and notebooks on base of Windows/MacOS).
    
    Detailed instructions for installation of security certificate will be placed
    in December 2015 on site www.telecom.kz.
    
    PR department
    Kazakhtelecom JSC
    
    30.11.2015
"

Received on Thursday, 3 December 2015 06:32:47 UTC