It already [almost] happened twice. Kazakhstan had plans to introduce country-wide MITM with certificates signed by a government agency, whose root certificate

It already [almost] happened twice. Kazakhstan had plans to introduce country-wide MITM with certificates signed by a government agency, whose root certificate would have had to be marked as trusted if you wanted to use internet [1]. Many Russian government websites including the largest retail bank had their certificates revoked due to sanctions, which forced the government to start their own untrustworthy certificate center, whose root CA is trusted out of the box by Yandex Browser and has to be trusted if you wanted to access these sites [2]. [1]: https://en.wikipedia.org/wiki/Kazakhstan_man-in-the-middle_attack https://en.wikipedia.org/wiki/Kazakhstan_man-in-the-middle_a... [2]: (In Russian) https://www.gosuslugi.ru/tls https://www.gosuslugi.ru/tls