View unanswered posts | View active topics It is currently Mon Sep 27, 2021 7:20 am

Reply to topic  [ 3 posts ] 
 How to stop the Kazakhstan government from intercepting your 
Author Message
How to stop the Kazakhstan government from intercepting your internet traffic
Update: The Kazakh government has halted its CA plans for now. If you previously installed the certificate, make sure it has been thoroughly removed from your system, and let us know if you encounter difficulties in the future.

As of this month, internet users in Kazakhstan have been seeing notices to download a government “certificate” to their computers when trying to access HTTPS-encrypted websites.

This certificate, also called a CA because it’s issued by a certificate authority, allows the government to man-in-the-middle attack your connection and read all information that passes through it, including passwords, personal messages, and credit card information. It would also allow the government to alter the contents of any sites, including any cryptographic keys, bitcoin addresses, or private secrets.

However, such an attack is easily discovered by your browser, and you will see a “site not secure” warning. To get rid of this warning, Kazakhstan has been forcing its ISPs to prompt users to download and manually install the government’s CA.

This CA, once installed, will trick the browser into thinking the “fake” certificate presented by the “fake” site is legitimate. The green lock will even appear in your browser window.

A screenshot of the Kazakhstan government CA.

How to stay private if you’re in Kazakhstan
Do not install the government’s CA
Use a VPN to connect to the internet
A VPN will disguise your physical location, so you will not be prompted to install the CA certificate. ExpressVPN’s Kazakhstan location is safe (and recommended if you want to obtain a Kazakh IP), as the server is not physically located in Kazakhstan.

If you have already installed the certificate, follow the steps below to remove it.
When comes to the issue of online privacy and security, we suggest to use a VPN, and our recommendation is RitaVPN. RitaVPN is a relatively new VPN service, but it’s already making a name for itself,which makes it one of the best VPN in 2019.

Thu Dec 05, 2019 3:16 am

Fri Feb 21, 2020 1:50 pm

Mon Nov 09, 2020 11:35 am
Display posts from previous:  Sort by  
Reply to topic   [ 3 posts ] 

Who is online

Users browsing this forum: Google [Bot] and 41 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group
Designed by ST Software.