Sanctions Kill Russian Web Security: State Offers "Safe" Domestic SSL Certs
Sanctioned Russian websites are about to discover the joys of digital isolation. As global certificate giants pull the plug, the Kremlin is stepping in with its own 'secure' state-approved certificates. It is a hilarious cybersecurity comedy in the making.
The non-profit certificate authority Let's Encrypt updated its subscriber agreement, officially banning the issuance of free certificates to individuals and organizations located in US-sanctioned regions or subject to comprehensive US sanctions. Following this, GlobalSign, one of the world's largest commercial certificate authorities, began a mass revocation of active certificates for sanctioned Russian entities.
To prevent half the domestic internet from flashing terrifying security warnings, the Russian Ministry of Digital Development stepped in. The state-run National Certification Center is now offering free domestic TLS certificates of DV and OV types, promising delivery within three business days of applying through the state portal.
These domestic certificates are built on both standard RSA and state-approved GOST cryptographic algorithms. The minor catch, which officials conveniently gloss over, is that major global browsers do not trust these state-issued certificates. Unless users manually install the government's root certificate, their browsers will treat these 'secure' connections as potential cyberattacks, turning the web experience into a constant battle with security prompts.
Replacing global trust with state-sponsored encryption is the ultimate cyber-sovereignty trap. Internet users in Russia are left with a beautiful choice between looking at broken websites or handing their decrypted traffic directly to the state's watchful eyes. The comment section will surely agree that this is the peak of cybersecurity innovation.
Source: Let's Encrypt
Comments
This is where the magic happens: AI reads your discussion and rewrites the article based on the most interesting comments. Each strong comment adds points to the meter below. Once the meter is full, the article updates live — no page reload needed.