Hacker News Reader

As far as I know my country doesn't force me to download any certificate, and Firefox doesn't have a cert issued by my government.

I’m curious though what CA your country uses for governmental services. Historically a lot of EU countries used some less than stellar CAs.

My local government is using GlobalSign and the Tax Agency (and probably all of the central government) uses Entrust.

nonetheless your government can force your ISP to do so many things

Yeah, and send somebody to my house yo shot me in the head. But none of them is happening.

Without a valid certificate, any ISP MITM attacks would be obvious