Or certificate providers are ordered to provide a false certificate; or in case of Europe (thanks to the GDPR), the “data protection officer” that larger services operating in the Union (including cloud- and hosting-services: hosting most of the modern internet), are forced to employ and provide with unrestricted access (supposedly “to monitor compliance”), may be ordered to do additional processing (including that for which their “employer” has no legal basis), whilst being gagged by “professional secrecy” (including towards this “employer”); and the NSA also has a program that seeks to weaken TLS standards (at least by pushing standards for post-quantum encryption (PQE) only, instead of AES + PQE).
Or certificate providers are ordered to provide a false certificate; or in case of Europe (thanks to the GDPR), the “data protection officer” that larger services operating in the Union (including cloud- and hosting-services: hosting most of the modern internet), are forced to employ and provide with unrestricted access (supposedly “to monitor compliance”), may be ordered to do additional processing (including that for which their “employer” has no legal basis), whilst being gagged by “professional secrecy” (including towards this “employer”); and the NSA also has a program that seeks to weaken TLS standards (at least by pushing standards for post-quantum encryption (PQE) only, instead of AES + PQE).