• There's no TLS inspection for youtube, original certificate appears. TLS connections over youtube.com domain is safe for now.

    • Yüksek ihtimalle üstten gelen "YouTube'a erişimi açın" emriyle sadece erişime açmakla kalmayıp garanti olsun diye sistemde YouTube'a dair ne varsa kaldırmışlar. TLS inspection da dahil.
    • 23/12/2021 Update: Today’s test indicate that they got the wiser and enabled back youtube.com for TLS inspection. The domain is still not blocked.
    $ openssl s_client -showcerts -servername www.youtube.com -connect 85.117.236.90:443
    CONNECTED(00000003)
    depth=0 C = TR, ST = Some-State, O = Internet Widgits Pty Ltd
    verify error:num=18:self signed certificate
    verify return:1
    depth=0 C = TR, ST = Some-State, O = Internet Widgits Pty Ltd
    verify return:1
    ---
    Certificate chain
     0 s:C = TR, ST = Some-State, O = Internet Widgits Pty Ltd
       i:C = TR, ST = Some-State, O = Internet Widgits Pty Ltd
    -----BEGIN CERTIFICATE-----
    @@@
    -----END CERTIFICATE-----
    ---
    Server certificate
    subject=C = TR, ST = Some-State, O = Internet Widgits Pty Ltd
    
    issuer=C = TR, ST = Some-State, O = Internet Widgits Pty Ltd
    
    ---
    
  • There's TLS inspection for other domains, MEB's fatihca certificate appears.

    $ openssl s_client -showcerts -servername www.google.com -connect 85.117.236.90:443
    CONNECTED(00000003)
    depth=1 C = TR, L = ANKARA, O = MEB, OU = BIDB, CN = IZM-UTM-FGT-07, emailAddress = sertifika@meb.gov.tr
    verify error:num=20:unable to get local issuer certificate
    verify return:1
    depth=0 C = TR, ST = Some-State, O = Internet Widgits Pty Ltd
    verify return:1
    ---
    Certificate chain
     0 s:C = TR, ST = Some-State, O = Internet Widgits Pty Ltd
       i:C = TR, L = ANKARA, O = MEB, OU = BIDB, CN = IZM-UTM-FGT-07, emailAddress = sertifika@meb.gov.tr
    -----BEGIN CERTIFICATE-----
    @@@
    -----END CERTIFICATE-----
     1 s:C = TR, L = ANKARA, O = MEB, OU = BIDB, CN = IZM-UTM-FGT-07, emailAddress = sertifika@meb.gov.tr
       i:DC = tr, DC = gov, DC = mebca, CN = fatihca
    -----BEGIN CERTIFICATE-----
    @@@
    -----END CERTIFICATE-----
    ---
    Server certificate
    subject=C = TR, ST = Some-State, O = Internet Widgits Pty Ltd
    
    issuer=C = TR, L = ANKARA, O = MEB, OU = BIDB, CN = IZM-UTM-FGT-07, emailAddress = sertifika@meb.gov.tr
    
    ---