HTTPS protocols revoked for Russian banks

At the moment sites of some banks that fell under sanctions do not open via the https protocol. Currently the sites of the Central Bank and Promsvyazbank do not open via https. About half an hour ago VTB’s site also did not open for the same reason.

In all the cases listed the certificates were issued by the same certification authority. According to the notification that the antivirus shows when “stopping the transition to an untrusted site” – “Reason: The authority for this certificate or for one of the certificates in the chain has been revoked”. You can get to the mentioned sites via https only by clicking the link “I understand the risk and want to proceed to the site”. Most users may be scared by such a warning and refuse to visit the sites.

At the same time Promsvyazbank and VTB have automatic redirect to the https version of the site enabled when trying to connect via http. That is, with an invalid certificate it is “impossible” to visit the site.

The Bank of Russia does not have a redirect from the http version to the https version of the site. Therefore the Bank of Russia site opens via http but is unavailable via https.

VTB promptly fixed the problem by issuing and installing a new certificate at a different certification authority.

And this is already a real problem – I would advise limiting access to internet banking at these banks.

I think they’re not idiots either and will soon get around this P… Protocol and create an alternative 😎