HN user
Force the people and then give them simple instructions to install certificate. And it's done.
Forcing is as easy, as blocking access to important services behind the certificate wall.
Let's Encrypt continues to be available to almost every vulnerable population in the world, including those that need it most. I say almost as I'm hesitant to speak in absolutes regarding a topic as complex as this.
Most of our sanctions-related blocks apply only to the governments of certain sanctioned countries, not their general population.
It doesn't work that way.
Blocking governments from getting certs doesn't hurt them in the slightest. The government can just create their own pki.
But it hurts the general population instead. People do not live in vacuum, they still need to access government sites. And thus people are forced to install root certificates of questionable trust.
When Let's Encrypt blocks government entities, it instead puts respective vulnerable population in even less secure environment.
Although, given the current events, I am not sure Let's Encrypt continues to deserve the trust it had.