Kazakhstan man-in-the-middle attack

If installed on users' devices, the certificate would have allowed the Kazakh government to intercept, decrypt, and re-encrypt any traffic passing through systems it controlled.

[4][5] Sites operated by Google, Facebook and Twitter appeared to be among the Kazakh government's initial targets.

[6] On August 21, 2019, Mozilla and Google simultaneously announced that their Firefox and Chrome web browsers would not accept the government-issued certificate, even if installed manually by users.

[6] As of August 2019[update], Microsoft has so far not made any changes to its browsers, but reiterated that the government-issued certificate was not in the trusted root store of any of its browsers, and would not have any effect unless a user manually installed it.

[9] In December 2020, the Kazakh government attempted to re-introduce the government-issued root certificate for a third time.