It's the same kind of non-trust you (and others) assert over CAcert. See how well that model worked with Comodo and TurkTrust - both of which are still in busi

It's the same kind of non-trust you (and others) assert over CAcert. See how well that model worked with Comodo and TurkTrust - both of which are still in business and in default CA lists, which is counter to your assertion that careful CA operation makes business sense. Unfortunately there's no will with browser vendors to _really_ improve matters (maybe TACK?), so something like CAcert is great should it get implemented (providing some heat to CA providers) and even when not (by showing the browser vendors' hypocrisy).