>Soooo can you help me understand what's happening here? They can't decrypt proper https (proper meaning your computer does not have a fake CA cert installed t

>Soooo can you help me understand what's happening here? They can't decrypt proper https (proper meaning your computer does not have a fake CA cert installed that is owned by them, which in itself is HIGHLY unlikely). So your privacy is safe in this regard. However, they can intercept traditional DNS queries, which are plaintext and not encrypted. And likewise, they can see the ip address destination in all TCP/UDP packets. The latter of which gives them the ability to filter for people who are potentially suspicious. For example, if your computer is talking to a known Tor node, or a known VPN node, you can get flagged for additional investigation of things like finances, travel, e.t.c. Or for example, they can see that you are doing a lot of crypto transactions because of the network connections to networks, and then that can get flagged for a more thorough tax investigation. >How can Swiss people protect themselves? You really don't need to. In general, there is nothing really to worry about if you aren't doing something against the law in the first place. You could make the argument that ignoring this is essentially handing your rights over to authorities who are going to use it to control you, but that argument has 2 big holes. First, generally with government, there really isn't any government in existence that will do authoritarian stuff like mass spying without having other authoritarian structures in place to control its citizens. Its either full on 100% authoritarian regime (like North Korea), or its not really mass spying for population control and more for things like terrorism, money laundering, or anything else that is illegal, and has legal processes in place to protect its citizens even from itself. This is the case for USA and Switzerland. It wouldn't make sense for them to want to spy on all the citizens when there are significant barriers in place in them being able to just round up anyone they want based on any and all suspicions and throw them in jail without due process. Secondly, in the sense of what is being collected, there really isn't an expectation of privacy here from even a functional view. From the ground up, packets get bounced around through different countries, so if your own country doesn't keep track of who you are talking to, some other country can. On a level higher, you depend on a lot of services for ease of life, and its not really an valid argument to make to say that you trust those services with your data, but not the government. Sure companies like Apple have less power over your life, but you have no idea who they are sharing that data with (and no, their own statements on it do not count). If you truly want to be private on the web, you need to understand how internet works from the ground up in the first place. For example, in my past job with cybersecurity, we build software that used linguistic steganography and internet forums for secure communication. Until you understand how that would work and why, you can't really expect to be private.