Comment by throwaway7767

It always seemed odd to me how strictly CACert is treated given that TrustWave got a pass when they deliberately sold a root CA certificate for man-in-the-middle purposes.

It's almost as if money is more important than key management practices.