My root certificates are provided by a Debian package, not Google, so if I'm trusting anyone, I'm trusting them. (And their judgement of the root certificates).

My root certificates are provided by a Debian package, not Google, so if I'm trusting anyone, I'm trusting them. (And their judgement of the root certificates). It's not unheard of, that root certs are revoked for unsecure behaviour. It seems like the system works to me. https://en.m.wikipedia.org/wiki/DigiNotar https://en.m.wikipedia.org/wiki/DigiNotar