WebPKI Observatory — Jurisdiction Risk
Five jurisdictions are classified as high legal risk due to frameworks enabling compelled access or undermining of cryptographic systems: China, Russia, the United Kingdom, Australia, and Hong Kong. India and Turkey present moderate risk where legal ambiguity or surveillance frameworks could compel CA cooperation without public disclosure. These classifications affect 7 of the 30 government CAs and multiple commercial providers operating under these legal regimes, creating scenarios where lawful orders could force certificate misissuance without triggering breach disclosure requirements.