Enter the .ca registrar: https://www.cira.ca/en/canadian-shield/
I wonder if the NSA had done a "everyone, get behind this firewall" type of campaign if it would have been more successful/less leaky