3 ms·

Like most gov, they probably have access to a root CA and they MITM.

• ahje 8y ago
  Didn't a new Norwegian CA offer free https certs a while back? </tinfoil>
• Ajedi32 8y ago
  There are currently no publicly trusted CAs participating in such a scheme. If there were, it'd be trivially detectable due to the millions of fraudulent certificates showing up in Certificate Transparency logs.
  • trumped 8y ago
    Of course they won't tell you that they are doing it...
    • Ajedi32 8y ago
      They _have_ to tell you, there's no alternative option. If they don't publish the certs in multiple logs, then they aren't considered valid by browsers.