but everyone disagrees. a sketchy CA should not be given the benefit of the doubt. and customers of sketchy CA should suffer for not doing their homework and s

but everyone disagrees. a sketchy CA should not be given the benefit of the doubt. and customers of sketchy CA should suffer for not doing their homework and should rightly scramble to secure certs from other providers to resume their business. the only sin of kernel/distro maintainers is not dropping those CAs faster. what browsers did is the ultimate sin of sacrificing users to not be blamed by something they are fixing under the guise of backward compatibility.