Comment by 0xakhil

If somehow the private key of a root CA gets leaked, will that make all devices vulnerable?

Also what is stopping a government from getting access to these private keys?