q drops last bread
honestly, it seems reasonable to me that a military website would potentially require users to install a root CA cert. Why would they trust a third party as a root CA?
Yes, microsoft keeps logs so they can ban people from chat for harassment/the usual.