The problem with root certificates is there are so many of them installed by default with your operating system. As of writing this message I currently have ov

The problem with root certificates is there are so many of them installed by default with your operating system. As of writing this message I currently have over 170 root certificates on my macOS. Some of them are from companies who are known to care very little about your privacy. There's even a "Federal Common Policy" certificate which is actually run by the US government [1] If the government did MITM you're traffic, it would still show in the certificate chain. But how many people really check this every time they visit a site? 1. https://security.stackexchange.com/a/71174 https://security.stackexchange.com/a/71174