What to do if the provider makes a certificate substitution?

Question

Digital certificates

Greetings. I use QWERTY provider (Moscow). Recently, Kaspersky began to issue the following message:

in detail:

As I understand it, the QWERTY provider for some reason somehow replaces the certificate for the Pushbullet extension of the Google Chrome browser. How can this be avoided? How bad is it and what threatens?

Answer 1

forum.qwerty.ru/index.php?showtopic=367078
see last comment

Answer 2

Use a VPN. It threatens that your ISP, or someone else with access to the provider's key, can view encrypted HTTPS traffic

Answer 3

Greetings from Roskom ... apparently. The provider tries to conduct MiTM in order to view the contents of secure connections. This is a normal practice for corporate networks, but home providers usually do not indulge in this.