Which would require creating new roots to be submitted to Mozilla's CA program, and passing the bar for inclusion of a new CA. That's a multi-year process, unl

Which would require creating new roots to be submitted to Mozilla's CA program, and passing the bar for inclusion of a new CA. That's a multi-year process, unless they can get another CA to cross-sign their root, like LE did. I doubt other CAs will be willing to carry that level of risk given the reputation of WoSign/StartCom.