March 22, 2022, 5:16 p.m. | /u/SystemOmicron

Privacy & Freedom in the Information Age www.reddit.com

It's already been posted here that Russia started to offer a [govt root CA certificate](https://bugzilla.mozilla.org/show_bug.cgi?id=1758773) that makes MITM attack possible.

I found some more context [here](https://www.csoonline.com/article/3653315/traffic-interception-and-mitm-attacks-among-security-risks-of-russian-tls-certs.html) if you want a bit less technical overview.

Just want to warn you: if anyone you know uses Yandex Browser, they should stop ASAP. It has already adopted that certificate.

Also: if you're in Russia and need to use a govt website, only use the certificate in a dedicated virtual machine. Do not install …

browser ca certificate privacy root russia yandex

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Senior InfoSec Manager - Risk and Compliance

@ Federal Reserve System | Remote - Virginia

Security Analyst

@ Fortra | Mexico

Incident Responder

@ Babcock | Chester, GB, CH1 6ER

Vulnerability, Access & Inclusion Lead

@ Monzo | Cardiff, London or Remote (UK)

Information Security Analyst

@ Unissant | MD, USA