What is preventing other countries from doing something similar and how do we know they are not doing it?
It makes me suspect this standard is deliberately set up to allow for MitM.
It makes me suspect this standard is deliberately set up to allow for MitM.
And we know they are not doing it because if they were, we’d all be forced to install certificate profiles on our devices like the people in TFA here...