What do you do?  You immediately reach out to Apple, Google, Facebook, Twitter, Box, Dropbox, Tumblr, and any other popular platform which has mobile apps.  You ask, or down-right demand they implement certificate pinning in their apps so they will fail when middled with the government provided certificate.  This will in turn break access to those platforms via mobile apps which will result in very real and direct impact to citizens who will then hopefully wake up and pressure the government to roll-back the program or at least put exceptions in place.  You continue this strategy with banks, etc., until it becomes clear to the government that this plan will not work.  Note that cert pinning for mobile and desktop apps should have happened long ago &amp; this might be the perfect opportunity to drive it to happen.