Comment by myshoemouth

I'm curious. How does a state actor do actual DPI without pushing certs to end user devices?