> In practice, governments will probably just MITM the connection
If they routinely MITM connections they will quickly be found out, and the CA would be removed from browsers.
If they routinely MITM connections they will quickly be found out, and the CA would be removed from browsers.