453
Firefox 149 adds built-in free VPN with 50GB monthly data
(www.omgubuntu.co.uk)
This is a most excellent place for technology news and articles.
So if they were going to do an attack like this, they wouldn't do anything like the DH attack you're talking about, they'd have a custom CA in the browser's SSL root store. That root cert means they can generate a certificate for any website you visit, and that custom root cert would be how they decrypt your traffic.
Afaik there isn't a current attack on proper DH key pairings, but you can't block the custom certificate path at the browser level without some serious server side work/client side JS to validate