How can I make sure that the root certificate in my browser (say VeriSign) is correct and is what it actually should be?
I found that the root certificate information is available here. But what if the site is compromised as well and the fingerprint is modified in a way to match the compromised root certificate? So all the certificates that are signed by root CA could be compromised too.
What am I missing?