Follow
@kravietz
Good, that it's not it, but MITM attacks are still something to be expected. A lot of government entities and government controlled enterprises had problems reissuing their certs last year so they have started their own certification authority. They strongly encourage you to install that CA cert and Chromium reskins by Russian companies (e.g. Yandex Browser) come with it preinstalled. I bet they will start sniffing traffic with that sooner or later.
@m0xee @kravietz
These fake CAs were created, and fake CA root certs were created, and delivered as a base for mass-sniffing operation since the beginning.