Original request to be added to the root store:

https://bugzilla.mozilla.org/show_bug.cgi?id=1231853

Public discussion:

https://groups.google.com/g/mozilla.dev.security.policy/c/0g...

https://groups.google.com/g/mozilla.dev.security.policy/c/R2...

I would be interested to hear others' thoughts on if this process was sufficiently rigorous.