IT IS THE YEAR OF OUR LORD 2019 AND PEOPLE STILL DO NOT KNOW HOW TO DODGE BRIGHT/DARK BLADE #ffxiv
@polychrome in case you're interested he wrote up his technique in a blog and open-sourced a basic implementation of it
So the government of Kazakhstan is MITM'ing all SSL'ed traffic https://lobste.rs/s/uqj8nq/mitm_on_all_https_traffic_kazakhstan#c_0boxyk
The way they are doing this is by adding a Certificate Authority (CA) that allows them to snoop all traffic.
This is, by the way, why SSL is criticized as being "only as secure as the weakest CA in your system". Here it's deliberate, but that's a problem in general.