"Certificate cannot be trusted" warning in Kazakhstan

この記事はまだ翻訳されていません。すでに SUMO のローカライズ方法を知っている場合は、この記事を翻訳してください。SUMO の記事を翻訳する方法を学びたい場合は、記事翻訳の手引きをご覧ください

Internet Service Providers (ISPs) in Kazakhstan have been prompting users to install a government-issued root certificate on their devices. Many users were not aware that the certificate was being used to intercept their network communications, enabling a Man-in-the-Middle (MITM) attack.

The security and privacy of HTTPS encrypted communications in Firefox and other browsers relies on trusted Certificate Authorities (CAs) to issue website certificates only to someone that controls the domain name or website. However, if you install a root certificate manually, you are choosing to trust a certificate that doesn’t necessarily have to follow any privacy and security standards.

For your security, Firefox will block the use of the Kazakhstan root CA certificate, considering it invalid even if you’ve installed it.

See the Mozilla Blog for more information.

How do I know if Firefox has blocked the Kazakhstan root CA certificate?

If you attempt to access a site that responds with this certificate, you will get an error message saying the certificate cannot be trusted.

How do I remove this certificate?

  1. In the Menu bar at the top of the screen, click Firefox and then select Preferences or Settings, depending on your macOS version.Click the menu button Fx89menuButton and select Settings.
  2. Go to the Privacy & Security panel.
  3. Scroll down to the end and click View Certificates.
  4. Under Authorities, select Qaznet Trust network from the list and click Delete.
You may have also installed the root certificate into the operating system (e.g. Windows, Android) of your device. If so, you must also follow instructions specific to your operating system to remove it, or else Firefox may not protect you from this threat.

What can I do to protect my privacy?

  • If you installed the root CA certificate, remove it immediately.
  • Change your passwords to a strong, unique password for each of your online accounts.
  • Research the use of virtual private network (VPN) software, or the Tor Browser, to access the Web. The Electronic Frontier Foundation provides helpful guidance on choosing a VPN (see Choosing the VPN That's Right for You).

この記事は役に立ちましたか?

しばらくお待ちください...

以下の人々がこの記事の執筆を手伝ってくれました:

Illustration of hands

ボランティア

あなたの専門知識を成長させ、他の人と共有してください。質問に答えたり、ナレッジベースを改善したりしてください。

詳しく学ぶ