Russia Just Created Its Own Certificate Authority.

mental outlaw never fails to include anime gifs 💀

Just to clarify. The padlock means "We are certain that you are connected to a site that has control over that domain name, btw the connection is encrypted". It doesn't mean "you are on a secure site". This is mentioned in the vid, I just wanted to summarize.

I've always wondered how the internet would be in the Soviet Union, if it weren't dissolved. Guess we might know the answer soon

At the same this is pretty damn sketchy, it is also super sketchy how access to backbone technology is all in the hands of American tech companies "we don't like your country, now your entire population should not have access to being able to do banking securely, hosting, being able to make money online or anything"

For those with the basic knowledge of SSL Certificates, http vs https and trust authority, Skip to 7:55 for the video in context of Russia.

As a cybersecurity major, your videos help me apply what I learn to real scenarios, and I appreciate that you explain everything in a way it's easy to understand. Thank you!

The truth comes out, he wasn't banned from posting for a week, but actually suffering from crippling Vtuber addiction. We've all been there

"that's like remembering the phone number of every single one of your friends. that doesn't make sense" Damn that makes me feel old, as this is exactly what we did. It was common to have memorized two dozen or more phone numbers. Friends, family, work, etc.

Russian here. First time hearing about this certificate thing ngl but was a nice watch. Thanks for the information not gonna ever install that crap

Russia anti-censorship security V.S. social media anti-censorship bypasses.

Fun fact many goverment websites from brazil do not have a certificate Gov websites have gotten better but most of them are still shit here in brazil

"Just send me the virus link" A few days ago, someone I didn't know messaged me and I responded with "what is it today? gift cards of crypto?"

1:53 DNS servers are rarely hacked, but if they would get hacked, then the attacker could just buy a certificate for the domain, and TLS is circumvented. You only need to demonstrate that you control a certain domain to buy a certificate for it. What TLS really protects against is man in the middle attacks, when the attacker hacks your network, or you're on an insecure wifi, or your ISP/government are hacking. I used to demonstrate that with rogue wifi APs with an SSID like McDonalds or something that people's phones will automatically connect to.

I think the major problem with this, is the fact that the user is forced to only use government specified browsers that can use the government created certificate service.....Sounds like an absolute monopoly with absolute power over what can be seen, posted, shared, and disseminated.... Seems like a perfectly dystopian internet experience....

The anime gifs make this infodump easier to digest. Stay a legend, man.

I remember hearing about this back in Iran 10 years ago. They used a Dutch certificate authority to mitm Google users. I wish we could move on to a better system than this.

I've legit been wondering how sanctions would affect CAs in Russia.

That was so well explained. I am glad I subscribed to this channel.

1:25 “imagine trying to remember all the phone numbers for your friends… it wouldn’t make since”. Me: well buddy back in my day…

Dude, this was really good video. Well put together and packed with info. On a topic that I've wondered about for a long time too. Good job.