SSL connection problem

[Confusedssl]

I am getting an error when trying to access a specific website that the connection is not secure. When I look at the SSL chain, the certificate root is Vodafone's Internal Root CA. What's going on? I spoke to Helpdesk who asked me to reboot my router and disabled my content controls, neither of which address the problem

[Confusedssl]

I posted this previously with screenshots but it was blocked for spam *sigh*

The website I am trying to access is rt-dot-com and the ssl cert is from iwf-dot-internal-dot-vodafone-dot-co-dot-uk

IWF = Internet Watch Foundation which is meant to be about preventing access to child abuse. Why is this being issued again RT-dot-com

[Confusedssl]

Trying to access rt.com on my phone and getting message ssl cert is not valid. Looking at details Vodafone have intercepted and issued their own certificate. Worryingly, the cert namespace suggests it's for IWF, Internet Watch Foundation.

What's going on here? Why are Vodafone inserting themselves into my ssl connections?

 

[Jayach]

Why would you want to access a site that contains nothing but lies and propaganda?

[Confusedssl]

The issue at hand isn't the website, the issue is Vodafone intercepting the request AND issuing their own SSL certificate which completely breaks the connection. The certificate is invalid since the root CA is Vodafone Internal.

Surely this can't be intentional? If they wanted to block rt-dot-com, there are other ways to do it at a DNS or network level. 

[Jayach]

---

@Confusedssl wrote:

Surely this can't be intentional? If they wanted to block rt-dot-com, there are other ways to do it at a DNS or network level. 

---

I can't imagine it happening accidentally.

[CrimsonLiar]

A number of Russian propaganda sites are no longer viewable from the UK.  It's mostly caused by certificates being revoked by issuers.  It's a combination of trade sanctions and private companies no longer wishing to deal with Russian businesses.

[Confusedssl]

@CrimsonLiar do you have anything to support your assertion "It's mostly caused by certificates being revoked by issuers."? Other blocked websites don't exhibit this behaviour 

@This is how I see it in my browser. If this is intentional, it is very slopp

 

 

[CrimsonLiar]

See https://www.consilium.europa.eu/en/policies/sanctions/restrictive-measures-against-russia-over-ukrai... for an explanation of sanctions so far imposed - which include not only RT TV, but also blocking its internet presence

It is possible for individuals with a modicum of expertise to circumvent the blocks, but that is down to the individual and not something that I am prepared to discuss or promote beyond that it is possible and that there could potentially be consequences for sanctions-busting.