How many root certificate authorities are there in the world that are trusted by default by most browsers, or have their authority cross signed by one of the tr

How many root certificate authorities are there in the world that are trusted by default by most browsers, or have their authority cross signed by one of the trusted root certificate authorities. At last count, the number I heard of was north of 300. All it takes is one of them being semi shady and being willing to sell or cross sign root certs for someone else, like an ISP. And surprising number of those 300+ are pretty shady. This is one of the methods used in the Great Firewall of China. Or Russia. Or a number of other countries. And most of those countries have smaller annual budgets than AT&T. Of course, that's also why a lot of people in China use VPNs. Just like any sufficiently well funded company or country can go to certain businesses in Israel and get professional zero day/no touch malware that they can drop on any unsuspecting target. And Israel is not the only country selling that kind of technology.