3 ms·

Different phylosophy: why block VPNs when you can monitor them. Most Root CAs are in US.

• immibis 1y ago
  Certificate transparency is mandatory in browsers; interception certificates appear in certificate logs to be accepted. Have you found one? Edit: OCSP has been ended.
  • edgineer 1y ago
    He might be referring to OCSP. Browsers ping CAs by default, revealing to them the sites that are visited.
    • arcfour 1y ago
      OCSP is very much on the way out, this is hardly true anymore; although some things still check OCSP, many things do not.