Response from Chrome engineers I've heard is that they won't try to fight this, because anything intentionally overridden locally is already a game over. If th

Response from Chrome engineers I've heard is that they won't try to fight this, because anything intentionally overridden locally is already a game over. If they block custom certificates, then malware will patch the process to disable the checks. And in this case the Kazakh government could say "For your safety, the Chrome doesn't work with our Internet. Please use our Khrome instead".