How can I make sure that the root certificate in my browser (say VeriSign) is correct and is what it actually should be?

I found that the root certificate information is available here. But what if the site is compromised as well and the fingerprint is modified in a way to match the compromised root certificate? So all the certificates that are signed by root CA could be compromised too.

What am I missing?

  • I don't understand why the downvote? I totally showed what I've looked so far and the question is clear too – Kennet Celeste Oct 16 '17 at 15:52

At some point, you need to trust someone. Whether this is your browser maintainer who embedded the certificate or the website of the certificate authority that provides the root certificate.

For sure, if your trusted source is compromised, their is a risk of you being tricked.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.