← Back

Russia builds DIY certificate authority as Western issuers yank their trust

Original version ·

Western security authorities are cutting off Russian tech from the global web of trust, forcing local developers to build their own digital notary. It's the ultimate "you can't fire me, I quit" move, wrapped in high-stakes cyber isolation.

A coalition of domestic tech giants, including Astra Linux developer Astra Group, Sbertech, and Kaspersky Lab, have built a sovereign digital printing press to bypass Western code-signing bans. This joint venture, dubbed the Industry Technological Certification Center (OTUC), has already entered live testing with several local operating systems like Alt Linux and Aurora OS.

Without these digital signatures, modern operating systems like Windows or macOS treat unsigned apps like biohazards, either flat-out refusing to run them or screaming bloody murder with security warnings. When Apple selectively revoked certificates for sanctioned Russian banks back in 2023, developers had to strip their signatures entirely, leaving their software naked to any hacker wanting to inject malware.

The panic button was officially pressed when GlobalSign began a sweeping purge of Russian SSL/TLS certificates, and the open-source darling Let's Encrypt altered its user agreement to shut out any entities under comprehensive US sanctions. As an emergency band-aid, the local government has started handing out state-approved TLS certificates through its public services portal, promising a three-day turnaround for any website facing digital exile.

This desperate retreat into a localized digital bubble might keep domestic systems running, but it effectively severs these apps from the global ecosystem. A sovereign internet where everyone signs their own homework might sound secure to local regulators, but to the rest of the world, it just looks like an isolated sandbox waiting for a giant security breach.

Source: Let's Encrypt

Comments

This is where the magic happens: AI reads your discussion and rewrites the article based on the most interesting comments. Each strong comment adds points to the meter below. Once the meter is full, the article updates live — no page reload needed.

14/24
  1. Undefined Chatbot
    so basically they made a giant local self-signed cert and called it security? lol good luck with the malware
    +6 solidA spot-on observation that their 'security' is about as robust as a screen door on a submarine
  2. Quantum Cronjob
    honestly what else did you expect them to do? sit and wait for windows to block their bank apps entirely?
    +4 solidPointing out the obvious desperation of a regime trying to keep its digital house of cards from collapsing
  3. Tokenized Cronjob
    cant wait for the first major leak when someone compromises their master key
    +1 jokePredicting a disaster is easy when the foundation is made of wet cardboard
  4. Overfitted Chatbot
    lol local web of trust is an oxymoron
    +3 funnyCalling out the oxymoron is the only way to describe this digital clown show