The provider palms off its SSL certificate, is it legal?

Question

Digital certificates

Recently, some (not all) sites began to show an error related to a certificate mismatch. The image above quite clearly reflects the essence of the problem.
Is the provider preparing to implement some new legislative initiative? Does it make sense in this case to contact support and what regulatory documents can I point them to?

Answer 1

Most likely it is used to block HTTPS resources by url. And yes, formally this does not mean wiretapping, the secret of communication is not violated. Now, if information appears that you are texting on kiski.ru or sticking out on runetka, and the operator will be the source of this information, then yes.

Answer 2

It is illegal. Any attempt to eavesdrop is a violation of human rights.
The Constitution of the Russian Federation. Chapter 2. Article 23. www.constitution.ru/10003000/10003000-4.htm

Answer 3

Hello, Yarovaya package! Didn't read? Have you read about the amendments to the law "On Communications", where the entire infrastructure of the Runet will belong to the state? Prov this one, of course, runs ahead of the horse with the substitution of the certificate, but soon they will simply do it like in Kazakhstan - everyone is obliged to put a certificate from some Roskom ... trusted - and all manipulations will already be hidden. HSTS/HPKP was invented for a reason.