> But I'm not sure if the Mozilla root program list ever intended to be consumed by non-browser clients in the first place. Yet that is the thing that goes aro

> But I'm not sure if the Mozilla root program list ever intended to be consumed by non-browser clients in the first place. Yet that is the thing that goes around under the name "ca-certificates" and practically all non-browser TLS on Linux everywhere is rooted in it! Regardless of what the intent was, that is the role of the Mozilla CA bundle now.