One thing to remember is that VeriSign was originally an RSA spinoff, and helped define the role and requirements of today's certificate authorities. Granted a

One thing to remember is that VeriSign was originally an RSA spinoff, and helped define the role and requirements of today's certificate authorities. Granted a lot has happened since then, including the CA unit's sale to Symantec, but I'd be very, very surprised if VeriSign/Symantec handled a breach in the totally incompetent manner DigiNotar has. Long-term, it's becoming less of an issue anyway. The market is always spreading out, and the market share of the "big boys" will continue to shrink. More CAs means more possible breaches, of course, but it also reduces the wider cost of shutting down any single CA. (Not that I don't agree that the CA system as currently constituted has issues, I just don't think VeriSign is the big problem.)