> How do we (or Google) know that the CIA and FBI can't create certificates from all the CAs because they have stolen/demanded the Root CA for them? Well, we k

> How do we (or Google) know that the CIA and FBI can't create certificates from all the CAs because they have stolen/demanded the Root CA for them? Well, we know they don't do this on scale, because we'd spot the rogue certs in the certificate transparency logs.