-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
Hi list,
Kazakhstan has submitted a ticket at mozilla for root inclusion: Add Root Certification Authority of the Republic of Kazakhstan (root.gov.kz): https://bugzilla.mozilla.org/show_bug.cgi?id=1232689
- From the discussion of the dev-security-policy mailing list (https://groups.google.com/forum/#!forum/mozilla.dev.security.policy): The CA's are available here: http://root.gov.kz/root_cer/rsa.php http://root.gov.kz/root_cer/gost.php
One site that uses these CA's is: https://pki.gov.kz/index.php/en/forum/
Here are the laws (mentioned in this HN comment): https://news.ycombinator.com/item?id=10665344
Do we have any probes in Kazakhstan and/or someone that has access to the network and can run some tests to find out how many websites/services are MITMed already?
~Vasilis