[omginternets]

That makes sense, thank you.

Follow-up question: presumably, a state actor with dominion or leverage over a CA can coerce said CA into issuing a certificate, right?

[agwa]

Yes, though eventually the state actor would run out of CAs to coerce as all the CAs in their country get distrusted.

The threat of distrust means CAs have a very strong incentive to contest any government orders, since if they comply their business is destroyed.

[PeterStuer]

In some very prominent countries there are laws with extreme consequences which not only prevent companies from contesting and not complying, but even prevent them ever disclosing such requests.

[ExoticPearTree]

True, but then they will be found out and distrusted. So basically they'll lose business because of the government of the country they are established in.

[omginternets]

That tracks. Thanks for helping me get a bead on this!