> In 2015, the Kazakhstan government attempted to have a root certificate included in Mozilla’s trusted root store program. After it was discovered that they we

> In 2015, the Kazakhstan government attempted to have a root certificate included in Mozilla’s trusted root store program. After it was discovered that they were intending to use the certificate to intercept user data, Mozilla denied the request. This strikes me as odd. Does this mean that political authorities (or major tech companies) can get their roots in the program, as long as there's no direct evidence they're using it to MITM? Seems like you'd want the opposite policy, where to get your root in the program, you have to sign a bunch of agreements about how you're going to use it and submit to regular audits to make sure you're not misusing your new authority. Maybe I'm reading too much into this though.