[flyinghamster]

That's where CNNIC comes in. All they need to do is issue their own fake certificate for (insert blocked site here).

[imron]

Isn't it wonderful to have your own certificate authority.