> but distrust all American CA's from their browser and they should be accommodated too. Even a (mainland) Chinese user won't be able to distrust American CA's

> but distrust all American CA's from their browser and they should be accommodated too. Even a (mainland) Chinese user won't be able to distrust American CA's and still browse the Internet fine, and it is known that China's network is one of the most isolated one on earth filtered by the GFW. For example, Baidu's certificate is signed by Verisign, Taobao by GlobalSign, QQ by GeoTrust. All of those certificate authorities all headquartered in the United States. CA's like Symantec is just too big to fail, even if your proposal is implemented.