[ad_1]
Google and Mozilla are taking action against the efforts of the Kazakhstan government to set up surveillance against its citizens. The two companies announced their intention to ban the security certificate (Qaznet) revealed by the Government of Kazakhstan last month, which allowed it to monitor the encrypted Internet activity of any user who l? installed.
The government has forced Internet service providers to cooperate by forcing all customers to install the certificate – designed to spy on the use of the Internet by citizens – in order to access the Internet, which is safe. 39; turned out to be He served as a Trojan horse.
The security certificate allowed the Kazakh government to attack HTTPS with a list of 37 domains, including Facebook, Twitter, Google and others, according to a study published by Censored Planet of the University of Michigan. .
HTTPS websites are usually encrypted so that ISPs or governments can not access them, but in the case of Kazakhstan, MitM attack broke the encryption of these sites, allowing the government to spy freely private Internet activity.
Chrome and Firefox in Kazakhstan block an illegal security certificate before users can download it. Mozilla will block the Kazakh certificate through OneCRL, used by Firefox to revoke certificates since 2015.
Users who connect to the Internet in Kazakhstan have received a message on their smartphone or computer asking them to install the security certificate.
Chrome also blocks the security certificate via CRLSet and adds it to the blocking list in the source code of the Chromium project.
This decision may seem unnecessary given that Kazakhstan stopped asking users to install the certificate two weeks ago. Reuters announced earlier this month that its country had stopped deploying the monitoring system after be bumped into legal difficulties.
The State Security Committee of Kazakhstan withdrew after a group of Kazakh lawyers filed lawsuits against three mobile operators in the country in order to restrict the Internet access after users had refused to install the certificate.
The State Security Committee of Kazakhstan issued a statement in which he described the testimony as a completed test. The Mozilla Foundation acknowledged that she knew that Kazakhstan had completed the test.
But she explained that if the certificate is installed, users still run the risk, that the mechanisms that the state can use to spy on web traffic are still in place and that we will not wait to exploit to new vulnerability in order to repair it.
"We will continue to monitor the actions of the Kazakh government and take action if similar certificates are issued in the future.If the Kazakh government asks users to install a new certificate, we will take similar measures to protect the security and privacy of Firefox users, "said Mozilla.
Google said: We will never tolerate any attempt by any organization – governmental or otherwise – to obtain data about Chrome users. We have put in place safeguards against this specific problem and we will always take steps to secure our users around the world.
Google and Mozilla ban Internet censorship in Kazakhstan
This content has been transferred textually from the source Arab Portal for Technology News without any changes or distortions.
Source link
