Comment by billpg

The rot started when browsers started including root certs as trusted by default.