Re: [perpass] Kazakhstan to MITM all SSL traffic on January 1st, 2016

Leif Johansson <leifj@mnt.se> Fri, 04 December 2015 17:18 UTC

Return-Path: <leifj@mnt.se>
X-Original-To: perpass@ietfa.amsl.com
Delivered-To: perpass@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ABA491A8AE9 for <perpass@ietfa.amsl.com>; Fri, 4 Dec 2015 09:18:38 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pBtSUMbCeDEK for <perpass@ietfa.amsl.com>; Fri, 4 Dec 2015 09:18:37 -0800 (PST)
Received: from mail-lb0-x22a.google.com (mail-lb0-x22a.google.com [IPv6:2a00:1450:4010:c04::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 17ADA1A8ADF for <perpass@ietf.org>; Fri, 4 Dec 2015 09:18:34 -0800 (PST)
Received: by lbbcs9 with SMTP id cs9so24325591lbb.1 for <perpass@ietf.org>; Fri, 04 Dec 2015 09:18:32 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mnt-se.20150623.gappssmtp.com; s=20150623; h=content-type:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=7o9xTIqGhHJQR1esPkQYIX3ddBSrNA+hamnrBd4A57E=; b=rGF0kl2OH68xenTP1wjO+/+oXwh6YCxYxwxUvzbvnTK8lwVkGDMoTFctIXl5ulXwO+ i/Kvcu6HiJ31qnzelITr54ugpdwCoNP561vSdLiuX8cCoeBxA3m2QWrVzcvltOGi0AUc eWIVRrsSFXtEoYChm0EKXrfI/XVBf+8ByTem5WHWU5PyfZpenlFK5FlRZsVXKzyWJbRb u08fneAfDfFoKSZjvHu0asm8+iI5kZf3u8+3QPeB+rs7ReACcmtzUWQ8faXYPyN/k+Jw WnOTu8sRPdbLll7RNOCDK4/9sc/5qdkJcb9KCEC3DXZ05i+VD1ts+huGe2i2caKtlSEk Df7g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:content-type:mime-version:subject:from :in-reply-to:date:cc:content-transfer-encoding:message-id:references :to; bh=7o9xTIqGhHJQR1esPkQYIX3ddBSrNA+hamnrBd4A57E=; b=EDIV8zhblMrymv0CwzZ4DVD+EpHLOIE3L2JB/GrgdRd/CqnJaeRRkfizL7vqKDpiwR ObaF8omdxF4HNlUAzPomGYJn0DVcUp9hqvQ4fpTWq3POSQl32lDhcAfYur+M4i5qo2xO nSlreuW8Hc91Szuqfl0gnimRWt9a8J+26VbLHpd2HMjQpyd04DtnARSIEzA4IOqD+hHG i50e1/4GserCPxwkF973SYecjTmaj/tXuLFTTiGmaZeGPOhkZByoA0RpknKCefbHvj+L 68S3EgqLwg9OcWECHMXEh9gOqjNhgvxcRJEgSqExe1bR/S7K1Znq/XmghFMck+RE2yxv GIaQ==
X-Gm-Message-State: ALoCoQnioUkKzlvpkfyfJ9NOgJq8uSp2HLJXshQYd8Eqd8XUrFqZ/H9AyJrBZgISzAZRPMUwPj4A
X-Received: by 10.112.218.5 with SMTP id pc5mr8672957lbc.76.1449249512250; Fri, 04 Dec 2015 09:18:32 -0800 (PST)
Received: from [172.28.100.214] (h-246-19.a137.corp.bahnhof.se. [5.150.246.19]) by smtp.gmail.com with ESMTPSA id 70sm2501259lfw.2.2015.12.04.09.18.31 (version=TLSv1/SSLv3 cipher=OTHER); Fri, 04 Dec 2015 09:18:31 -0800 (PST)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (1.0)
From: Leif Johansson <leifj@mnt.se>
X-Mailer: iPhone Mail (13B143)
In-Reply-To: <CAF5Urx8A6KAeWqmV6Abn79nPGeUsiJb-puKid7kDzTPrO-PKVg@mail.gmail.com>
Date: Fri, 04 Dec 2015 18:18:30 +0100
Content-Transfer-Encoding: quoted-printable
Message-Id: <E7FAAA83-C658-44C9-B821-74DAAA32FA11@mnt.se>
References: <CAF5Urx8A6KAeWqmV6Abn79nPGeUsiJb-puKid7kDzTPrO-PKVg@mail.gmail.com>
To: Yakov Shafranovich <yakov@shaftek.biz>
Archived-At: <http://mailarchive.ietf.org/arch/msg/perpass/3TIdMHxt4h8LyTRjMy8ZFm-mwh8>
Cc: perpass@ietf.org
Subject: Re: [perpass] Kazakhstan to MITM all SSL traffic on January 1st, 2016
X-BeenThere: perpass@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "The perpass list is for IETF discussion of pervasive monitoring. " <perpass.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/perpass>, <mailto:perpass-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/perpass/>
List-Post: <mailto:perpass@ietf.org>
List-Help: <mailto:perpass-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/perpass>, <mailto:perpass-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 04 Dec 2015 17:18:38 -0000


Skickat från min iPhone

> 3 dec. 2015 kl. 14:43 skrev Yakov Shafranovich <yakov@shaftek.biz>:
> 
> This is being done via a "national" SSL certificate.

You must mean the 'plan to make terminations for benefit glorious nation of Kazakhstan'