Is it broken when a CA can be compromised without consequence? Is it broken when bad actors can have root certs installed in most browsers?<p>Yes, it&#x27;s broken. It&#x27;s been broken for a very long time.