How about convincing the big browser vendors (e.g. through their bugtrackers) to finally accept CACerts without warning? Such a shame that.