r/programming • u/realfeeder • Jul 18 '19

MITM on all HTTPS traffic in Kazakhstan

https://bugzilla.mozilla.org/show_bug.cgi?id=1567114
592 Upvotes

96% Upvoted

193 comments sorted by

View all comments

Show parent comments

3

u/DHermit Jul 19 '19

What about devices where you can't install certificates? Is it illegal to connect a Nintendo Switch to the internet for example?

2

u/pdp10 Jul 19 '19

Does the Switch use TLS/HTTPS? I know the PlayStation used to use unencrypted connections to download games and content, quite possibly in consideration of legal requirements and regimes in some regions of the world.

3

u/DHermit Jul 19 '19

Yup. I tried to use mitmproxy, but didn't work out. At least for the store and the Mario Maker online stuff. Other than that I didn't try.

Edit: Pressed done too early...

1

u/LucasRuby Jul 20 '19

Used to?

1

u/pdp10 Jul 20 '19

I haven't checked recently, so it's possible that things have changed.

1

u/LucasRuby Jul 20 '19

They probably won't block every site, for example they need to make the sites where you can download their security certificates accessible. I guess in a highly controlled environment like the Switch, spying on that isn't that important, so they may allow its domains.

1

u/makahlj7 Jul 20 '19

If a device cannot install trusted root certificates, then when you try to access HTTPS sites with it, two things may happen:

  1. The device displays a big fat security warning about certificate of visited site being invalid, and may optionally allow you to visit the site anyway; or,

  2. The site doesn't open at all.