It's unclear. Do you know what CA's you currently trust on your machine? I bet you can't even identify 1 tenth of them. There are so many CA's installed by def

It's unclear. Do you know what CA's you currently trust on your machine? I bet you can't even identify 1 tenth of them. There are so many CA's installed by default that it's truly a massive man-in-the-middle attack whenever you might think you are safe, you are not. I would assume the CCP & the KGB control at least one of the CA's your OS currently trusts. (No doubt the NSA has one too) In debian: dpkg -L ca-certificates