It always seemed odd to me how strictly CACert is treated given that TrustWave got a pass when they deliberately sold a root CA certificate for man-in-the-middle purposes.
It's almost as if money is more important than key management practices.
It's almost as if money is more important than key management practices.
Or the CACert website itself.
Always seemed to me like some kind of joke.