I believe that VeriSign has issued a big share of world's SSL certificates. Many corporations and governments use them. Is it possible for a person that has access to Verisign private keys to sneak a couple and start many undetectable man-in-the-middle attacks? Isn't it too much of a power for a single person to (potentially) have access to the big share of worlds' secret information?
I'm new to the field of security, pardon me if this question is silly.