# Protecting our Users in Kazakhstan

**URL:** https://discourse.mozilla.org/t/protecting-our-users-in-kazakhstan/44165
**Category:** Mozillians
**Tags:** announcements
**Created:** [August 21, 2019, 10:04am UTC](https://discourse.mozilla.org/t/protecting-our-users-in-kazakhstan/44165 "2019-08-21T10:04:22Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![lucyeoh](https://sea1.discourse-cdn.com/flex001/user_avatar/discourse.mozilla.org/lucyeoh/32/20943_2.png) [@lucyeoh](https://discourse.mozilla.org/u/lucyeoh)
#### Post date: [August 21, 2019, 10:04am UTC](https://discourse.mozilla.org/t/protecting-our-users-in-kazakhstan/44165/1 "2019-08-21T10:04:22Z")

</div>

Hi Mozillians,

Earlier today we shared [this blog post](https://blog.mozilla.org/security/2019/08/21/protecting-our-users-in-kazakhstan/) about how Mozilla is protecting our users in Kazakhstan.

In July, a Firefox user informed Mozilla of a security issue impacting Firefox users in Kazakhstan: They stated that Internet Service Providers (ISPs) in Kazakhstan had begun telling their customers that they must install a government-issued root certificate on their devices. What users didn’t know was that the certificate was being used to intercept network communications. Other users and [researchers confirmed these claims](https://www.f5.com/labs/articles/threat-intelligence/kazakhstan-attempts-to-mitm-itscitizens), and [listed 3 dozen popular social media and communications sites that were affected](https://censoredplanet.org/kazakhstan).

Today, Mozilla took action to block this certificate. We also encourage anyone who has already installed one of the Kazakhstan government controlled certificates to [remove it from their devices](https://support.mozilla.org/en-US/kb/certificate-cannot-be-trusted-warning-kazakhstan).

If you have any questions about the post please respond to this topic and the Policy and Community Development teams will do our best to respond.

Thanks,

Lucy

---

<div class="post-metadata">

### Author: ![asdofindia](https://sea1.discourse-cdn.com/flex001/user_avatar/discourse.mozilla.org/asdofindia/32/31946_2.png) [@asdofindia](https://discourse.mozilla.org/u/asdofindia)
#### Post date: [August 23, 2019, 12:46pm UTC](https://discourse.mozilla.org/t/protecting-our-users-in-kazakhstan/44165/2 "2019-08-23T12:46:31Z")

</div>

Will people of Kazakhstan be able to browse those websites if the certificate is disabled/not installed?
