In corporations, you need to enroll custom CA cert for that - usually done when enrolling devices into MDM, or when joining domain - you cannot MITM random dev

In corporations, you need to enroll custom CA cert for that - usually done when enrolling devices into MDM, or when joining domain - you cannot MITM random devices. For nation states, they started to require the custom CA cert as well via legislation, see the recent Kazakhstan story.