No, it's not true. You can tell it's not true, because if MITM certs signed by trusted root CAs were being issued, they'd appear in Certificate Transparency lo

No, it's not true. You can tell it's not true, because if MITM certs signed by trusted root CAs were being issued, they'd appear in Certificate Transparency logs. Although mis-issued certificates have happened [1] it is very rare, and convincing a root CA to intentionally issue you such a certificate would be very, very far from trivial. [1] https://www.computerworld.com/article/2714719/rogue-google-ssl-certificate-not-used-for-dishonest-purposes--turktrust-says.html https://www.computerworld.com/article/2714719/rogue-google-s...