[EGreg]

This is what I have a question about.

Can China pressure every domestic company to use their certificate authority allowing them to decrypt all TLS traffic, or be blocked? And block all sites outside China?

[supriyo-biswas]

Kazakhstan had attempted a similar move[1], albeit through PSAs rather than convincing device manufacturers to add certificates to end-user devices.

[1] https://en.wikipedia.org/wiki/Kazakhstan_man-in-the-middle_a...

[H8crilA]

1 - I believe they do it

2 - they obviously do not want to block all traffic, since they can do it any day, but they don't.