[cortesoft]

That means that either the government has a browser trusted root CA (which means they could spy on anyone in the world if they can MITM them), or they somehow force everyone in the country to install their trusted CAs.

[shmoe]

Who says they can't, but weak encryption is definitely an easier lift.