This is lame news.
But what I&#x27;m curious about is: What are they going to do (if anything) to validate the upstream certificates?<p>- What will their upstream root certificate policy be?<p>- If they MITM any old upstream certificate, how will they mitigate the huge target they are painting on Kazakh Internet users?