Jonathan Yu wrote:
But unfortunately CAcert's root
certificates do not, to my knowledge, come bundled with a default
installation of Firefox and need to be installed manually.
CAcert is currently undergoing Mozilla's audit policy
(http://www.mozilla.org/projects/security/certs/policy/) in order to get
their certificate included in Firefox and Thunderbird. Their root cert
is still not included in OS/X or Safari and Windows/IE requires a $75K
audit + $10k/year fees for a Webtrust audit.
See http://wiki.cacert.org/wiki/InclusionStatus for more info.
PAUSE uses CAcert, and requests that people install CAcert's root cert
in their browser to use PAUSE:
http://www.cpan.org/modules/04pause.html#ssl
Seems like a decent approach.
