Since I don't browse Chinese websites I just distrusted the WoSign root and used the Red Jacket add-on[0] to distrust their intermediate certs (at least some of

Since I don't browse Chinese websites I just distrusted the WoSign root and used the Red Jacket add-on[0] to distrust their intermediate certs (at least some of which are cross-signed by other trusted CAs). [0] https://addons.mozilla.org/en-US/firefox/addon/red-jacket/ https://addons.mozilla.org/en-US/firefox/addon/red-jacket/ (this is necessary since there's no built-in UI in Firefox to distrust intermediate certificates: https://bugzilla.mozilla.org/show_bug.cgi?id=585352 https://bugzilla.mozilla.org/show_bug.cgi?id=585352)