The Tor Projects Response to their Certs being forged

I completely agree with your message but I think this part is actually even worse!

Theoretically you could manage all the root certs yourself and revoke and delete whichever you want but... as the average user you get a system shoved down your throat that has clearly reached critical mass (no Iran puns intended) and you basically willing-fully trust it because you have learned Firefox is awesome and safe and that little golden padlock tells you "hey, it's ok, relax buddy!" and even just a few years back most but the very versed encryption geeks could probably care less about WHAT exactly was going on in the mess that are root CAs and were happy enough there was something SSL-y going on.