Most TLS connections these days use cipher suites with perfect forward secrecy so governments won't be able to decrypt the connections without an active MITM at

Most TLS connections these days use cipher suites with perfect forward secrecy so governments won't be able to decrypt the connections without an active MITM attack. Since Certificate Transparency is effectively required for all CAs now, that will leave a paper trail.