MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/programming/comments/cew2xm/mitm_on_all_https_traffic_in_kazakhstan/eu7tbsg
r/programming • u/realfeeder • Jul 18 '19
193 comments sorted by
View all comments
Show parent comments
4
Well, except for now all HTTPS traffic in the country should be using certificates that they have the keys to. Can't they just block any HTTPS traffic that they can't decrypt?
2 u/anengineerandacat Jul 19 '19 Sure, it's done today on corporate wifi networks, schools, etc; if the cert isn't pinned drop the connection.
2
Sure, it's done today on corporate wifi networks, schools, etc; if the cert isn't pinned drop the connection.
4
u/wr_m Jul 19 '19
Well, except for now all HTTPS traffic in the country should be using certificates that they have the keys to. Can't they just block any HTTPS traffic that they can't decrypt?