> Are you sure the certs we add were not merged upstream ? As far as I can see, cacert.org won't be added anytime soon. (See these comments on the mozilla bug tracker): https://bugzilla.mozilla.org/show_bug.cgi?id=215243#c158 https://bugzilla.mozilla.org/show_bug.cgi?id=215243#c190
Also, this page links to the audit todo list which seems to show there's a fair amount left for them to do: http://wiki.cacert.org/InclusionStatus In fact, I was curious why cacert is included on OpenBSD by default as I couldn't find any discussion on the mailing lists or in the cvs logs in regards to rationale for inclusion.
