Kazakhstan begins intercepting citizens’ web traffic to ‘protect them from cyber threats’
The Kazakhstan government has started to intercept all HTTPS traffic from all devices within its borders effective July 17, reports ZDNet.
Local internet service providers (ISPs) have been instructed by the government to force their citizens to install a state-authorized certificate on all devices, and all browsers.
This certificate allows the Kazakhstan government to decrypt HTTPS internet traffic, view its contents, and then re-encrypt it with the certificate once again before it is sent to its destination, making it easy for the Kazakhstan government to surveil its citizensâÂ online activities.
While the government says only internet users in Kazakhstanâs capital of Nur-Sultan will have to install the certificate, it appears users from across the nation are said to beÂ blocked from accessing the internet until they they installed the certificate.
Local ISP Kcell, for example, has put up a new page instructing users on how to install the security certificate, stating âit will help protect the information systems and data, as well as detect hacker and cyber-attacks of the Internet fraudsters on the countryâs information space, private and banking sector, before they can cause damage.â
âCustomers failing to install Security Certificate on their mobile devices may face technical limitations when accessing certain websites,â it adds.
The Kazakhstan government and local ISPs are positioning the certificate as beneficial to citizens, government agencies and companies by protecting them from cyber threats. But the development has raised privacy concerns aboutÂ man-in-the-middle (MITM) certificate schemes.
This isnât the first time the Kazakhstan government has attempted to force its citizens to install a government-issued root certificate which decrypts their HTTPS internet traffic.
In 2015, the countryâs government ordered its citizens to install a certificate but ultimately had to go back on its plans after multiple organizations sued the Kazakhstan government, citing fears that the certificates would weaken the security of the countryâs internet traffic.Â If its citizens want to avoid being spied on, theyâll have to rally similar efforts to push back against this ruling right quick.