But who verifies that the CA is who they claim to be?<p>Or is doing what they claim to do?<p>Maybe they&#x27;ve been hacked, or infiltrated, or sold out, or ...<p>If I&#x27;m American, do I trust Chinese CAs? Or <i>vice versa</i>?